pkgsrc-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[pkgsrc/trunk]: pkgsrc/lang Update go115 to 1.15.14.



details:   https://anonhg.NetBSD.org/pkgsrc/rev/6d22977f90ff
branches:  trunk
changeset: 455862:6d22977f90ff
user:      bsiegert <bsiegert%pkgsrc.org@localhost>
date:      Tue Jul 13 10:05:08 2021 +0000

description:
Update go115 to 1.15.14.

This minor release includes a security fix according to the new security policy.

crypto/tls clients can panic when provided a certificate of the wrong type for
the negotiated parameters. net/http clients performing HTTPS requests are also
affected. The panic can be triggered by an attacker in a privileged network
position without access to the server certificate's private key, as long as a
trusted ECDSA or Ed25519 certificate for the server exists (or can be issued),
or the client is configured with Config.InsecureSkipVerify. Clients that
disable all TLS_RSA cipher suites (that is, TLS 1.0–1.2 cipher
suites without ECDHE), as well as TLS 1.3-only clients, are unaffected.

This is issue 47143 and CVE-2021-34558. Thanks to Imre Rad for reporting this
issue.

diffstat:

 lang/go/version.mk  |   4 ++--
 lang/go115/Makefile |   3 +--
 lang/go115/PLIST    |   5 ++++-
 lang/go115/distinfo |  10 +++++-----
 4 files changed, 12 insertions(+), 10 deletions(-)

diffs (66 lines):

diff -r caa2c0b25287 -r 6d22977f90ff lang/go/version.mk
--- a/lang/go/version.mk        Tue Jul 13 08:54:59 2021 +0000
+++ b/lang/go/version.mk        Tue Jul 13 10:05:08 2021 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: version.mk,v 1.120 2021/06/05 12:40:07 bsiegert Exp $
+# $NetBSD: version.mk,v 1.121 2021/07/13 10:05:08 bsiegert Exp $
 
 #
 # If bsd.prefs.mk is included before go-package.mk in a package, then this
@@ -7,7 +7,7 @@
 .include "go-vars.mk"
 
 GO116_VERSION= 1.16.5
-GO115_VERSION= 1.15.13
+GO115_VERSION= 1.15.14
 GO110_VERSION= 1.10.8
 GO19_VERSION=  1.9.7
 GO14_VERSION=  1.4.3
diff -r caa2c0b25287 -r 6d22977f90ff lang/go115/Makefile
--- a/lang/go115/Makefile       Tue Jul 13 08:54:59 2021 +0000
+++ b/lang/go115/Makefile       Tue Jul 13 10:05:08 2021 +0000
@@ -1,6 +1,5 @@
-# $NetBSD: Makefile,v 1.7 2021/05/24 19:52:33 wiz Exp $
+# $NetBSD: Makefile,v 1.8 2021/07/13 10:05:08 bsiegert Exp $
 
-PKGREVISION= 1
 .include "../../lang/go/version.mk"
 .include "../../lang/go/bootstrap.mk"
 
diff -r caa2c0b25287 -r 6d22977f90ff lang/go115/PLIST
--- a/lang/go115/PLIST  Tue Jul 13 08:54:59 2021 +0000
+++ b/lang/go115/PLIST  Tue Jul 13 10:05:08 2021 +0000
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.8 2021/06/04 16:43:21 bsiegert Exp $
+@comment $NetBSD: PLIST,v 1.9 2021/07/13 10:05:08 bsiegert Exp $
 bin/go${GOVERSSUFFIX}
 bin/gofmt${GOVERSSUFFIX}
 go115/AUTHORS
@@ -9016,6 +9016,9 @@
 go115/test/fixedbugs/issue4620.go
 go115/test/fixedbugs/issue4654.go
 go115/test/fixedbugs/issue4663.go
+go115/test/fixedbugs/issue46653.dir/bad/bad.go
+go115/test/fixedbugs/issue46653.dir/main.go
+go115/test/fixedbugs/issue46653.go
 go115/test/fixedbugs/issue4667.go
 go115/test/fixedbugs/issue4734.go
 go115/test/fixedbugs/issue4748.go
diff -r caa2c0b25287 -r 6d22977f90ff lang/go115/distinfo
--- a/lang/go115/distinfo       Tue Jul 13 08:54:59 2021 +0000
+++ b/lang/go115/distinfo       Tue Jul 13 10:05:08 2021 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.10 2021/06/04 16:43:21 bsiegert Exp $
+$NetBSD: distinfo,v 1.11 2021/07/13 10:05:08 bsiegert Exp $
 
-SHA1 (go1.15.13.src.tar.gz) = 4408218eeefe1367ca8b03a5cc3eb3d3dc164f2d
-RMD160 (go1.15.13.src.tar.gz) = 27a5186dfca92ff95c55ec3652e4af03a6204232
-SHA512 (go1.15.13.src.tar.gz) = 3f77716c9721afacb27daa175e236bb25cfc93602f1531df18938fad94bf4f59e81b81f53fa977c2ebc9a912942275a1106043133fec166965e72766b1638ba1
-Size (go1.15.13.src.tar.gz) = 23039791 bytes
+SHA1 (go1.15.14.src.tar.gz) = d7f349ac6af29f2790016d2c287772aca72d356c
+RMD160 (go1.15.14.src.tar.gz) = 47216fbc855df6ac4c0ab32eea928cfdf50f079c
+SHA512 (go1.15.14.src.tar.gz) = 2bf18efcb3a5f9e54de0a0e7ee27a689c2dc895d9403bc6f66e500358e70d1d664d7f17102126c98bd26fa2a3346ead358684e45b1a354cde8764c715064dd92
+Size (go1.15.14.src.tar.gz) = 23041432 bytes
 SHA1 (patch-misc_io_clangwrap.sh) = df5911c430ff6251abab12e5cc233e32fc3cd953
 SHA1 (patch-src_cmd_dist_util.go) = 24e6f1b6ded842a8ce322a40e8766f7d344bc47e
 SHA1 (patch-src_cmd_link_internal_ld_elf.go) = 3dfcb5c824d4201fadda0cfb6b48e5938899baf0


Home | Main Index | Thread Index | Old Index