Fedora has issued an advisory today (May 27):
Apparently Golang issues fixed in Bug 30362 required a rebuild for affected code.
In Mageia 8, running clash under strace (without golang installed) shows no
attempt to lookup or load golang libraries. It is loading qt4 libraries, and
basic tests are working.
That's why it would need rebuilt. It would be using routines that are built into it at build time.
21 BuildRequires: qt4-devel
22 BuildRequires: pkgconfig(libming)
23 BuildRequires: desktop-file-utils
No buildrequires for golang. As libming1 is a c library,I don't see any
indication clash uses go in either build or runtime.
OK, it looks like these clash's are two different pieces of software. We should be dropping any remaining Qt4 applications that haven't been ported to Qt5.
clash needs to be rebuilt for golang security issues =>
clash is unmaintained Qt4 application that should be droppedBlocks:
clash dropped with task-obsolete-9-108.mga9.