diff --git a/go1.17.7.src.tar.gz b/go1.17.7.src.tar.gz deleted file mode 100644 index 9c3ab91..0000000 --- a/go1.17.7.src.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:c108cd33b73b1911a02b697741df3dea43e01a5c4e08e409e8b3a0e3745d2b4d -size 22195583 diff --git a/go1.17.8.src.tar.gz b/go1.17.8.src.tar.gz new file mode 100644 index 0000000..b16abf1 --- /dev/null +++ b/go1.17.8.src.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:2effcd898140da79a061f3784ca4f8d8b13d811fb2abe9dad2404442dabbdf7a +size 22199282 diff --git a/go1.17.changes b/go1.17.changes index 30654b5..67939f6 100644 --- a/go1.17.changes +++ b/go1.17.changes @@ -1,3 +1,19 @@ +------------------------------------------------------------------- +Thu Mar 3 21:51:40 UTC 2022 - Jeff Kowalczyk + +- go1.17.8 (released 2022-03-03) includes a security fix to the + regexp/syntax package, as well as bug fixes to the compiler, + runtime, the go command, and the crypto/x509, and net packages. + Refs boo#1190649 go1.17 release tracking + CVE-2022-24921 + * boo#1196732 go#51112 CVE-2022-24921 + * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp + * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists + * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations + * go#51162 net: use EDNS to increase DNS packet size [freeze exception] + * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two + * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18 + ------------------------------------------------------------------- Fri Feb 18 02:10:17 UTC 2022 - Jeff Kowalczyk diff --git a/go1.17.spec b/go1.17.spec index df2074f..83a1f74 100644 --- a/go1.17.spec +++ b/go1.17.spec @@ -135,7 +135,7 @@ %endif Name: go1.17 -Version: 1.17.7 +Version: 1.17.8 Release: 0 Summary: A compiled, garbage-collected, concurrent programming language License: BSD-3-Clause