Accepting request 953825 from devel:languages:go
- go1.17.7 (released 2022-02-10) includes security fixes to the crypto/elliptic, math/big packages and to the go command, as well as bug fixes to the compiler, linker, runtime, the go command, and the debug/macho, debug/pe, and net/http/httptest packages. Refs boo#1190649 go1.17 release tracking CVE-2022-23806 CVE-2022-23772 CVE-2022-23773 * boo#1195838 go#50974 CVE-2022-23806 * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements * boo#1195835 go#50699 CVE-2022-23772 * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash * boo#1195834 go#35671 CVE-2022-23773 * go#50687 cmd/go: do not treat branches with semantic-version names as releases * go#50942 cmd/asm: "compile: loop" compiler bug? * go#50867 cmd/compile: incorrect use of CMN on arm64 * go#50812 cmd/go: remove bitbucket VCS probing * go#50781 runtime: incorrect frame information in traceback traversal may hang the process. * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch * go#50297 cmd/link: does not set section type of .init_array correctly * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package (forwarded request 953823 from jfkw) OBS-URL: https://build.opensuse.org/request/show/953825 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/go1.17?expand=0&rev=7
This commit is contained in:
commit
2877307162
@ -1,3 +0,0 @@
|
||||
version https://git-lfs.github.com/spec/v1
|
||||
oid sha256:4dc1bbf3ff61f0c1ff2b19355e6d88151a70126268a47c761477686ef94748c8
|
||||
size 22191372
|
3
go1.17.7.src.tar.gz
Normal file
3
go1.17.7.src.tar.gz
Normal file
@ -0,0 +1,3 @@
|
||||
version https://git-lfs.github.com/spec/v1
|
||||
oid sha256:c108cd33b73b1911a02b697741df3dea43e01a5c4e08e409e8b3a0e3745d2b4d
|
||||
size 22195583
|
@ -1,3 +1,28 @@
|
||||
-------------------------------------------------------------------
|
||||
Thu Feb 10 23:46:55 UTC 2022 - Jeff Kowalczyk <jkowalczyk@suse.com>
|
||||
|
||||
- go1.17.7 (released 2022-02-10) includes security fixes to the
|
||||
crypto/elliptic, math/big packages and to the go command, as well
|
||||
as bug fixes to the compiler, linker, runtime, the go command,
|
||||
and the debug/macho, debug/pe, and net/http/httptest packages.
|
||||
Refs boo#1190649 go1.17 release tracking
|
||||
CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
|
||||
* boo#1195838 go#50974 CVE-2022-23806
|
||||
* go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
|
||||
* boo#1195835 go#50699 CVE-2022-23772
|
||||
* go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
|
||||
* boo#1195834 go#35671 CVE-2022-23773
|
||||
* go#50687 cmd/go: do not treat branches with semantic-version names as releases
|
||||
* go#50942 cmd/asm: "compile: loop" compiler bug?
|
||||
* go#50867 cmd/compile: incorrect use of CMN on arm64
|
||||
* go#50812 cmd/go: remove bitbucket VCS probing
|
||||
* go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
|
||||
* go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
|
||||
* go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
|
||||
* go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
|
||||
* go#50297 cmd/link: does not set section type of .init_array correctly
|
||||
* go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Jan 6 20:38:08 UTC 2022 - Jeff Kowalczyk <jkowalczyk@suse.com>
|
||||
|
||||
|
@ -135,7 +135,7 @@
|
||||
%endif
|
||||
|
||||
Name: go1.17
|
||||
Version: 1.17.6
|
||||
Version: 1.17.7
|
||||
Release: 0
|
||||
Summary: A compiled, garbage-collected, concurrent programming language
|
||||
License: BSD-3-Clause
|
||||
|
Loading…
Reference in New Issue
Block a user