Changelog for
go1.14-1.14.15-48.18.x86_64.rpm :
* Mon Apr 15 2024 Bernhard Wiedemann
- Add reproducible.patch to avoid build-time race (boo#1102408)
* Tue Feb 27 2024 Dominique Leuenberger - Use %patch -P N instead of deprecated %patchN.
* Fri Feb 05 2021 Jeff Kowalczyk - go1.14.15 (released 2021-02-04) includes fixes to the compiler, runtime, the go command, and the net/http package. Refs boo#1164903 go1.14 release tracking
* go#43859 cmd/go: handle space in path to C compiler
* go#43796 cmd/go: TestScript/mod_get_fallback relies on x/tools not being tagged
* go#43792 internal/execabs: disable tests on js-wasm
* go#43574 cmd/compile: 32-bit random data corruption
* go#43405 x/mobile/cmd/gomobile: gomobile build on simple program returns \"ld: error: duplicate symbol: x_cgo_inittls\"
* go#42586 net/http: race in http2Transport
* Tue Jan 19 2021 Jeff Kowalczyk - go1.14.14 (released 2021-01-19) includes security fixes to the go command and crypto/elliptic package. CVE-2021-3114 CVE-2021-3115 Refs boo#1164903 go1.14 release tracking
* boo#1181145 CVE-2021-3114
* go#43787 crypto/elliptic: incorrect operations on the P-224 curve
* boo#1181146 CVE-2021-3115
* go#43784 cmd/go: packages using cgo can cause arbitrary code execution on Windows
* Thu Dec 03 2020 Jeff Kowalczyk - go1.14.13 (released 2020-12-03) includes fixes to the compiler, runtime, and the go command. Refs boo#1164903 go1.14 release tracking
* go#42755 cmd/compile: ICE due to bad ORL constant
* go#42635 runtime: infinite loop in lockextra on linux/amd64
* go#42566 cmd/go: allow flags in CGO_LDFLAGS environment variable not in security allowlist
* Thu Nov 12 2020 Jeff Kowalczyk - go1.14.12 (released 2020-11-12) includes security fixes to the cmd/go and math/big packages. CVE-2020-28362 CVE-2020-28367 CVE-2020-28366 Refs boo#1164903 go1.14 release tracking
* boo#1178750 CVE-2020-28362
* go#42553 math/big: panic during recursive division of very large numbers
* boo#1178752 CVE-2020-28367
* go#42560 cmd/go: arbitrary code can be injected into cgo generated files
* boo#1178753 CVE-2020-28366
* go#42557 cmd/go: improper validation of cgo flags can lead to remote code execution at build time
* Fri Nov 06 2020 Jeff Kowalczyk - go1.14.11 (released 2020-11-05) includes fixes to the runtime, and the net/http and time packages. Refs boo#1164903 go1.14 release tracking
* go#42155 time: Location interprets wrong timezone (DST) with slim zoneinfo
* go#42112 x/net/http2: the first write error on a connection will cause all subsequent write requests to fail blindly
* go#41991 runtime: macOS-only segfault on 1.14+ with \"split stack overflow\"
* go#41913 net/http: request.Clone doesn\'t deep copy TransferEncoding
* go#41703 runtime: macOS syscall.Exec can get SIGILL due to preemption signal
* go#41386 x/net/http2: connection-level flow control not returned if stream errors, causes server hang
* Thu Oct 15 2020 Jeff Kowalczyk - go1.14.10 (released 2020-10-14) includes fixes to the compiler, runtime, and the plugin and testing packages. Refs boo#1164903 go1.14 release tracking
* go#41815 database/sql: TestTxCannotCommitAfterRollback failures on windows-amd64-2008 builder
* go#41796 runtime: memory corruption from stack-allocated defer on 32-bit
* go#41619 memory corruption on linux/386 with float32 arithmetic, GO386=387, buildmode pie/c-archive
* go#41322 runtime: \"fatal error: unexpected signal during runtime execution\" on windows-amd64-longtest builder of Go 1.15.2 commit
* go#40880 testing: summary and test output interleaved
* go#40694 plugin: program on linux/s390x sometimes hangs after calling \"plugin.Open\"
* go#40647 runtime: pcdata is -2 and 12 locals stack map entries error on nil pointer
* go#40642 runtime: race between stack shrinking and channel send/recv leads to bad sudog values
* Wed Sep 09 2020 Jeff Kowalczyk - go1.14.9 (released 2020-09-09) includes fixes to the compiler, linker, runtime, documentation, and the net/http and testing packages. Refs boo#1164903 go1.14 release tracking
* go#41192 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test
* go#41016 net/http: Transport.CancelRequest no longer cancels in-flight request
* go#40973 net/http: RoundTrip unexpectedly changes Request
* go#40968 runtime: checkptr incorrectly -race flagging when using &^ arithmetic
* go#40938 cmd/compile: R12 can be clobbered for write barrier call on PPC64
* go#40848 testing: \"=== PAUSE\" lines do not change the test name for the next log line
* go#40797 cmd/compile: inline marker targets not reachable after assembly on arm
* go#40766 cmd/compile: inline marker targets not reachable after assembly on ppc64x
* go#40501 cmd/compile: for range loop reading past slice end
* go#40411 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment
* go#40398 runtime: fatal error: checkdead: runnable g
* go#40192 runtime: pageAlloc.searchAddr may point to unmapped memory in discontiguous heaps, violating its invariant
* go#39955 cmd/link: incorrect GC bitmap when global\'s type is in another shared object
* go#39690 cmd/compile: s390x floating point <-> integer conversions clobbering the condition code
* go#39279 net/http: Re-connect with upgraded HTTP2 connection fails to send Request.body
* go#38904 doc: include fix for #34437 in Go 1.14 release notes- Use go_api instead of version for update-alternatives priority- Add missing \'?\' before \'suse_version\' test by Xia Lei
* Fri Sep 04 2020 Marcus Meissner - replace binutils-gold requires by recommends for aarch64 on SLE. (bsc#1170826)
