Hello community, here is the log from the commit of package go1.13 for openSUSE:Factory checked in at 2020-07-21 15:42:59 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/go1.13 (Old) and /work/SRC/openSUSE:Factory/.go1.13.new.3592 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "go1.13" Tue Jul 21 15:42:59 2020 rev:11 rq:821468 version:1.13.14 Changes: -------- --- /work/SRC/openSUSE:Factory/go1.13/go1.13.changes 2020-06-12 21:37:08.575721252 +0200 +++ /work/SRC/openSUSE:Factory/.go1.13.new.3592/go1.13.changes 2020-07-21 15:45:27.591927640 +0200 @@ -1,0 +2,38 @@ +Fri Jul 17 07:33:25 UTC 2020 - Jeff Kowalczyk <[email protected]> + +- go1.13.14 (released 2020/07/16) includes fixes to the compiler, + vet, and the database/sql, net/http, and reflect packages + Refs boo#1149259 go1.13 release tracking + * go#39925 net/http: panic on misformed If-None-Match Header with http.ServeContent + * go#39848 cmd/compile: internal compile error when using sync.Pool: mismatched zero/store sizes + * go#39823 cmd/go: TestBuildIDContainsArchModeEnv/386 fails on linux/386 in Go 1.14 and 1.13, not 1.15 + * go#39697 reflect: panic from malloc after MakeFunc function returns value that is also stored globally + * go#39561 cmd/compile/internal/ssa: TestNexting/dlv-dbg-hist failing on linux-386-longtest builder because it tries to use an older version of dlv which only supports linux/amd64 + * go#39538 net: TestDialParallel is flaky on windows-amd64-longtest + * go#39287 cmd/vet: update for new number formats + +------------------------------------------------------------------- +Wed Jul 14 00:24:08 UTC 2020 - Jeff Kowalczyk <[email protected]> + +- go1.13.13 (released 2020/07/14) includes security fixes to the + crypto/x509 and net/http packages addressing the following CVE: + CVE-2020-15586 CVE-2020-14039 + Refs boo#1174153 boo#1174191 + Refs boo#1149259 go1.13 release tracking + * boo#1174153 CVE-2020-15586 + * boo#1174191 CVE-2020-14039 (Windows only) + * go#40211 net/http: Expect 100-continue panics in httputil.ReverseProxy + * go#40209 crypto/x509: Certificate.Verify method seemingly ignoring EKU requirements on Windows + +------------------------------------------------------------------- +Mon Jun 29 13:46:47 UTC 2020 - Dirk Mueller <[email protected]> + +- Packaging improvements for update-alternatives priority, + %license tag, and permissions in %files macro section. + * update-alternatives increment priority on this and subsequent + go1.x versions using priority = 20 + (minor version) i.e. + go1.13 = 33, go1.14 = 34, etc. + * Use %license tag for LICENSE keep %doc for suse_version < 1500 + * Remove %defattr(-,root,root,-) in %files + +------------------------------------------------------------------- @@ -4 +42,6 @@ -- Add Prefer-etc-hosts-over-DNS.patch to ensure /etc/hosts is used if /etc/nsswitch.conf is not present boo#1172868 gh#golang/go#35305 +- Add patch to ensure /etc/hosts is used if /etc/nsswitch.conf is + not present boo#1172868 gh#golang/go#35305 + * add go1.x-prefer-etc-hosts-over-dns.patch + * Patch renamed and fields added per packaging guidelines + on 2020-07-15 by Jeff Kowalczyk <[email protected]> + * Patch can likely be dropped for go1.16 in February 2021 @@ -15,0 +59,9 @@ + +------------------------------------------------------------------- +Fri Jun 5 22:56:00 UTC 2020 - Jeff Kowalczyk <[email protected]> + +- go1.13.12 (released 2020/06/01) includes fixes to the runtime, + and the go/types and math/big packages. + Refs boo#1149259. + * go#38932 runtime: preemption in startTemplateThread may cause infinite hang + * go#36689 go/types, math/big: data race in go/types due to math/big.Rat accessors unsafe for concurrent use Old: ---- Prefer-etc-hosts-over-DNS.patch go1.13.11.src.tar.gz New: ---- go1.13.14.src.tar.gz go1.x-prefer-etc-hosts-over-dns.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ go1.13.spec ++++++ --- /var/tmp/diff_new_pack.cUNq5J/_old 2020-07-21 15:45:32.459934059 +0200 +++ /var/tmp/diff_new_pack.cUNq5J/_new 2020-07-21 15:45:32.463934065 +0200 @@ -120,7 +120,7 @@ %endif Name: go1.13 -Version: 1.13.11 +Version: 1.13.14 Release: 0 Summary: A compiled, garbage-collected, concurrent programming language License: BSD-3-Clause @@ -139,7 +139,7 @@ Patch9: gcc7-go.patch Patch11: gcc9-rsp-clobber.patch # PATCH-FIX-UPSTREAM prefer /etc/hosts over DNS when /etc/nsswitch.conf not present boo#1172868 gh#golang/go#35305 -Patch12: Prefer-etc-hosts-over-DNS.patch +Patch12: go1.x-prefer-etc-hosts-over-dns.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build # boostrap %if %{with gccgo} @@ -358,7 +358,7 @@ %post update-alternatives \ - --install %{_bindir}/go go %{_libdir}/go/%{go_api}/bin/go 30 \ + --install %{_bindir}/go go %{_libdir}/go/%{go_api}/bin/go $((20+$(echo %{version} | cut -d. -f2))) \ --slave %{_bindir}/gofmt gofmt %{_libdir}/go/%{go_api}/bin/gofmt \ --slave %{_sysconfdir}/gdbinit.d/go.gdb go.gdb %{_libdir}/go/%{go_api}/bin/gdbinit.d/go.gdb @@ -368,7 +368,6 @@ fi %files -%defattr(-,root,root,-) %{_bindir}/go %{_bindir}/gofmt %dir %{_libdir}/go @@ -385,10 +384,14 @@ %doc %{_docdir}/go/%{go_api}/AUTHORS %doc %{_docdir}/go/%{go_api}/CONTRIBUTORS %doc %{_docdir}/go/%{go_api}/CONTRIBUTING.md -%doc %{_docdir}/go/%{go_api}/LICENSE %doc %{_docdir}/go/%{go_api}/PATENTS %doc %{_docdir}/go/%{go_api}/README.md %doc %{_docdir}/go/%{go_api}/README.SUSE +%if 0%{?suse_version} < 1500 +%doc %{_docdir}/go/%{go_api}/LICENSE +%else +%license %{_docdir}/go/%{go_api}/LICENSE +%endif% # We don't include TSAN in the main Go package. %ifarch %{tsan_arch} @@ -409,7 +412,6 @@ %ifarch %{tsan_arch} %files race -%defattr(-,root,root,-) %{_datadir}/go/%{go_api}/src/runtime/race/race_linux_%{go_arch}.syso %endif ++++++ go1.13.11.src.tar.gz -> go1.13.14.src.tar.gz ++++++ /work/SRC/openSUSE:Factory/go1.13/go1.13.11.src.tar.gz /work/SRC/openSUSE:Factory/.go1.13.new.3592/go1.13.14.src.tar.gz differ: char 102, line 1 ++++++ go1.x-prefer-etc-hosts-over-dns.patch ++++++ From: Richard Brown <[email protected]> Date: Fri, 12 Jun 2020 14:21:56 +0200 Subject: net: prefer /etc/hosts over DNS when no /etc/nsswitch.conf is present References: gh#golang/go#35305 boo#1172868 Upstream: submitted go standard library package net assumes file /etc/nsswitch.conf and does not honor /usr/etc/nssswitch.conf location used in openSUSE. Upstream is reviewing a fix to remove invalid the glibc DNS resolution assumption for go1.16 release cycle scheduled for Februay 2021. --- src/net/conf.go | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/src/net/conf.go b/src/net/conf.go index 971b1a399a..f8f9aa70e4 100644 --- a/src/net/conf.go +++ b/src/net/conf.go @@ -203,9 +203,8 @@ func (c *conf) hostLookupOrder(r *Resolver, hostname string) (ret hostLookupOrde return fallbackOrder } if c.goos == "linux" { - // glibc says the default is "dns [!UNAVAIL=return] files" - // https://www.gnu.org/software/libc/manual/html_node/Notes-on-NSS-Configuration-File.html. - return hostLookupDNSFiles + // Workaround issues identified in https://github.com/golang/go/issues/35305 + return hostLookupFilesDNS } return hostLookupFilesDNS } -- 2.26.2
