Bug 1219988

Summary: go1.20,go1.21,go1.22: ensure VERSION file is present in go1.x toolchain GOROOT
Product: [openSUSE] openSUSE Tumbleweed Reporter: Jeff Kowalczyk <jkowalczyk>
Component: DevelopmentAssignee: Jeff Kowalczyk <jkowalczyk>
Status: IN_PROGRESS --- QA Contact: E-mail List <qa-bugs>
Severity: Normal    
Priority: P5 - None CC: santiago.zarate
Version: Current   
Target Milestone: ---   
Hardware: Other   
OS: Other   
Whiteboard:
Found By: --- Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---

Description Jeff Kowalczyk 2024-02-15 23:08:26 UTC
go1.x tool 'go tool dist' and 'go tool distpack' require the source file VERSION to be present in GOROOT. Current go1.x packaging is missing this file, ensure it is present.

Example: 

$ go version go1.22.0 linux/amd64

$ go tool dist list
go tool dist: FAILED: not a Git repo; must put a VERSION file in $GOROOT

$ go tool distpack
distpack: open /usr/lib64/go/1.22/VERSION: no such file or directory
Comment 1 OBSbugzilla Bot 2024-02-17 15:15:04 UTC
This is an autogenerated message for OBS integration:
This bug (1219988) was mentioned in
https://build.opensuse.org/request/show/1147335 Factory / go1.20
https://build.opensuse.org/request/show/1147336 Factory / go1.21
https://build.opensuse.org/request/show/1147337 Factory / go1.22
Comment 3 Maintenance Automation 2024-03-07 12:30:17 UTC
SUSE-SU-2024:0800-1: An update that solves five vulnerabilities and has two security fixes can now be installed.

Category: security (important)
Bug References: 1212475, 1219988, 1220999, 1221000, 1221001, 1221002, 1221003
CVE References: CVE-2023-45289, CVE-2023-45290, CVE-2024-24783, CVE-2024-24784, CVE-2024-24785
Sources used:
SUSE Linux Enterprise Software Development Kit 12 SP5 (src): go1.21-1.21.8-1.27.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 4 Maintenance Automation 2024-03-08 08:30:03 UTC
SUSE-SU-2024:0812-1: An update that solves five vulnerabilities and has two security fixes can now be installed.

Category: security (important)
Bug References: 1218424, 1219988, 1220999, 1221000, 1221001, 1221002, 1221003
CVE References: CVE-2023-45289, CVE-2023-45290, CVE-2024-24783, CVE-2024-24784, CVE-2024-24785
Sources used:
openSUSE Leap 15.5 (src): go1.22-1.22.1-150000.1.9.1
Development Tools Module 15-SP5 (src): go1.22-1.22.1-150000.1.9.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 5 Maintenance Automation 2024-03-08 08:30:08 UTC
SUSE-SU-2024:0811-1: An update that solves five vulnerabilities and has two security fixes can now be installed.

Category: security (important)
Bug References: 1212475, 1219988, 1220999, 1221000, 1221001, 1221002, 1221003
CVE References: CVE-2023-45289, CVE-2023-45290, CVE-2024-24783, CVE-2024-24784, CVE-2024-24785
Sources used:
openSUSE Leap 15.5 (src): go1.21-1.21.8-150000.1.27.1
Development Tools Module 15-SP5 (src): go1.21-1.21.8-150000.1.27.1
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (src): go1.21-1.21.8-150000.1.27.1
SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (src): go1.21-1.21.8-150000.1.27.1
SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (src): go1.21-1.21.8-150000.1.27.1
SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (src): go1.21-1.21.8-150000.1.27.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4 (src): go1.21-1.21.8-150000.1.27.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 6 Maintenance Automation 2024-03-22 12:31:40 UTC
SUSE-SU-2024:0936-1: An update that solves five vulnerabilities and has two security fixes can now be installed.

Category: security (important)
Bug References: 1218424, 1219988, 1220999, 1221000, 1221001, 1221002, 1221003
CVE References: CVE-2023-45289, CVE-2023-45290, CVE-2024-24783, CVE-2024-24784, CVE-2024-24785
Maintenance Incident: [SUSE:Maintenance:32983](https://smelt.suse.de/incident/32983/)
Sources used:
SUSE Linux Enterprise Software Development Kit 12 SP5 (src):
 go1.22-1.22.1-1.3.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.