Sync from SUSE:SLFO:1.1 go1.23 revision 4744c4bba131c8657940f69211f6c166

This commit is contained in:
Adrian Schröter 2025-01-27 10:44:48 +01:00
parent edb04f8689
commit fec5b76281
4 changed files with 27 additions and 6 deletions

BIN
go1.23.4.src.tar.gz (Stored with Git LFS)

Binary file not shown.

BIN
go1.23.5.src.tar.gz (Stored with Git LFS) Normal file

Binary file not shown.

View File

@ -1,3 +1,24 @@
-------------------------------------------------------------------
Thu Jan 16 20:07:56 UTC 2025 - Jeff Kowalczyk <jkowalczyk@suse.com>
- go1.23.5 (released 2025-01-16) includes security fixes to the
crypto/x509 and net/http packages, as well as bug fixes to the
compiler, the runtime, and the net package.
Refs boo#1229122 go1.23 release tracking
CVE-2024-45341 CVE-2024-45336
* go#71208 go#71156 boo#1236045 security: fix CVE-2024-45341 crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints
* go#71211 go#70530 boo#1236046 security: fix CVE-2024-45336 net/http: sensitive headers incorrectly sent after cross-domain redirect
* go#69988 runtime: severe performance drop for cgo calls in go1.22.5
* go#70517 cmd/compile/internal/importer: flip enable alias to true
* go#70789 os: io.Copy(net.Conn, os.Stdin) on MacOS terminate immediately without waiting for input
* go#71104 crypto/tls: TestVerifyConnection/TLSv12 failures
* go#71147 internal/trace: TestTraceCPUProfile/Stress failures
-------------------------------------------------------------------
Thu Dec 5 08:01:10 UTC 2024 - Adrian Schröter <adrian@suse.de>
- Enable loongarch64 builds
-------------------------------------------------------------------
Tue Dec 3 18:27:46 UTC 2024 - Jeff Kowalczyk <jkowalczyk@suse.com>

View File

@ -1,7 +1,7 @@
#
# spec file for package go1.23
#
# Copyright (c) 2024 SUSE LLC
# Copyright (c) 2025 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@ -122,7 +122,7 @@
%endif
Name: go1.23
Version: 1.23.4
Version: 1.23.5
Release: 0
Summary: A compiled, garbage-collected, concurrent programming language
License: BSD-3-Clause
@ -171,7 +171,7 @@ Obsoletes: go-devel < go%{version}
# go-vim/emacs were separate projects starting from 1.4
Obsoletes: go-emacs <= 1.3.3
Obsoletes: go-vim <= 1.3.3
ExclusiveArch: %ix86 x86_64 %arm aarch64 ppc64 ppc64le s390x riscv64
ExclusiveArch: %ix86 x86_64 %arm aarch64 ppc64 ppc64le s390x riscv64 loongarch64
%description
Go is an expressive, concurrent, garbage collected systems programming language