Hello community, here is the log from the commit of package go1.15 for openSUSE:Factory checked in at 2020-09-03 01:16:07 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/go1.15 (Old) and /work/SRC/openSUSE:Factory/.go1.15.new.3399 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "go1.15" Thu Sep 3 01:16:07 2020 rev:2 rq:831307 version:1.15.1 Changes: -------- --- /work/SRC/openSUSE:Factory/go1.15/go1.15.changes 2020-08-13 10:23:00.746876684 +0200 +++ /work/SRC/openSUSE:Factory/.go1.15.new.3399/go1.15.changes 2020-09-03 01:16:42.084526755 +0200 @@ -1,0 +2,10 @@ +Tue Sep 1 17:01:46 UTC 2020 - Jeff Kowalczyk <jkowalc...@suse.com> + +- go1.15.1 (released 2020-09-01) includes security fixes to the + net/http/cgi, net/http/fcgi packages. + CVE-2020-24553 + Refs boo#1175132 go1.15 release tracking + * boo#1176031 CVE-2020-24553 + * go#41165 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified + +------------------------------------------------------------------- Old: ---- go1.15.src.tar.gz New: ---- go1.15.1.src.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ go1.15.spec ++++++ --- /var/tmp/diff_new_pack.J40iJl/_old 2020-09-03 01:16:42.944527071 +0200 +++ /var/tmp/diff_new_pack.J40iJl/_new 2020-09-03 01:16:42.948527072 +0200 @@ -135,7 +135,7 @@ %endif Name: go1.15 -Version: 1.15 +Version: 1.15.1 Release: 0 Summary: A compiled, garbage-collected, concurrent programming language License: BSD-3-Clause ++++++ go1.15.src.tar.gz -> go1.15.1.src.tar.gz ++++++ /work/SRC/openSUSE:Factory/go1.15/go1.15.src.tar.gz /work/SRC/openSUSE:Factory/.go1.15.new.3399/go1.15.1.src.tar.gz differ: char 143, line 1
