baserev update by copy to link target

• Files Changed
• Browse Source

- Packaging improvements:
  * Use %patch -P N instead of deprecated %patchN

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Packaging improvements:
  * boo#1219988 ensure VERSION file is present in GOROOT
    as required by go tool dist and go tool distpack

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- go1.20.14 (released 2024-02-06) includes fixes to the crypto/x509
  package.
  Refs boo#1206346 go1.20 release tracking
  * go#64760 staticlockranking builders failing on release branches on LUCI
  * go#65322 crypto: rollback BoringCrypto fips-20220613 update
  * go#65379 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder

• Files Changed
• Browse Source

- go1.20.14 (released 2023-08-01) includes a security fix to the
  crypto/tls package, as well as bug fixes to the assembler and the
  compiler.
  Refs boo#1206346 go1.20 release tracking
  * go#64760 staticlockranking builders failing on release branches on LUCI
  * go#65322 crypto: rollback BoringCrypto fips-20220613 update
  * go#65379 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder

• Files Changed
• Browse Source

- go1.20.7 (released 2023-08-01) includes a security fix to the
  crypto/tls package, as well as bug fixes to the assembler and the
  compiler.
  Refs boo#1206346 go1.20 release tracking
  * go#64760 staticlockranking builders failing on release branches on LUCI
  * go#65322 crypto: rollback BoringCrypto fips-20220613 update
  * go#65379 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd64_10.15 LUCI builder

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- go1.20.13 (released 2024-01-09) includes fixes to the runtime and
  the crypto/tls package.
  Refs boo#1206346 go1.20 release tracking
  * go#63910 x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders
  * go#64409 runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal
  * go#64718 crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- go1.20.12 (released 2023-12-05) includes security fixes to the go
  command, and the net/http and path/filepath packages, as well as
  bug fixes to the compiler and the go command.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-45285 CVE-2023-45284 CVE-2023-39326
  * go#63972 go#63845 boo#1217834 security: fix CVE-2023-45285 cmd/go: git VCS qualifier in module path uses git:// scheme
  * go#64040 go#63713 boo#1216943 security: fix CVE-2023-45284 path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4
  * go#64434 go#64433 boo#1217833 security: fix CVE-2023-39326 net/http: limit chunked data overhead
  * go#63983 cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
  * go#63988 cmd/go: TestScript/mod_get_direct fails with "Filename too long" on Windows

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- go1.20.11 (released 2023-11-07) includes security fixes to the
  path/filepath package, as well as bug fixes to the linker and the
  net/http package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-45283 CVE-2023-45284
  * go#63714 go#63713 boo#1216943 boo#1216944 security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths
  * go#63316 cmd/link: split text sections for arm 32-bit
  * go#63740 net/http: http2 page fails on firefox/safari if pushing resources

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- go1.20.10 (released 2023-10-10) includes a security fix to the
  net/http package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-39325 CVE-2023-44487
  * go#63426 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- go1.20.9 (released 2023-10-05) includes one security fixes to the
  cmd/go package, as well as bug fixes to the go command and the
  linker.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-39323
  * go#63213 go#63211 boo#1215985 security: fix CVE-2023-39323 cmd/go: line directives allows arbitrary execution during build
  * go#62597 cmd/link: issues with Apple's new linker in Xcode 15 beta

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- go1.20.8 (released 2023-09-06) includes two security fixes to the
  html/template package, as well as bug fixes to the compiler, the
  go command, the runtime, and the crypto/tls, go/types, net/http,
  and path/filepath packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-39318 CVE-2023-39319
  * go#62395 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts
  * go#62397 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts
  * go#61198 cmd/go: extended forwards compatibility for Go
  * go#61744 go/types: interface.Complete panics for interfaces with duplicate methods
  * go#61826 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address
  * go#61867 path/filepath: Clean on some invalid Windows paths can lose .. components
  * go#61873 cmd/go: using a module path without dot fails to build after toolchain selection
  * go#61966 crypto/tls: add GODEBUG to control max RSA key size
  * go#62018 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet)
  * go#62056 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values
  * go#62070 cmd/api: make non-importable

- Add missing directory pprof html asset directory to package.
  Refs boo#1215090
  * src/cmd/vendor/github.com/google/pprof/internal/driver/html/
    dir containing html assets is present in upstream Go
    distribution but missing from SUSE go1.x packages
  * Go programs importing runtime/pprof may fail with error:
    /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go
    pattern html: no matching files found
  * Reformat adjacent commment in spec file

• Files Changed
• Browse Source