CVS commit: pkgsrc/lang

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Fri Feb  7 10:17:49 UTC 2025

Modified Files:
        pkgsrc/lang/go: version.mk
        pkgsrc/lang/go122: distinfo
        pkgsrc/lang/go123: Makefile distinfo

Log Message:
Update go122 to 1.22.12 and go123 to 1.23.6.

This is a security update but it only applies on the ppc64le platform.

These minor releases include 1 security fix following the security policy:

-   crypto/elliptic: timing sidechannel for P-256 on ppc64le

    Due to the usage of a variable time instruction in the assembly
    implementation of an internal function, a small number of bits of secret
    scalars are leaked on the ppc64le architecture. Due to the way this
    function is used, we do not believe this leakage is enough to allow
    recovery of the private key when P-256 is used in any well known
    protocols.

    This is CVE-2025-22866 and Go issue https://go.dev/issue/71383.


To generate a diff of this commit:
cvs rdiff -u -r1.223 -r1.224 pkgsrc/lang/go/version.mk
cvs rdiff -u -r1.14 -r1.15 pkgsrc/lang/go122/distinfo
cvs rdiff -u -r1.7 -r1.8 pkgsrc/lang/go123/Makefile \
    pkgsrc/lang/go123/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/go/version.mk
diff -u pkgsrc/lang/go/version.mk:1.223 pkgsrc/lang/go/version.mk:1.224
--- pkgsrc/lang/go/version.mk:1.223     Thu Feb  6 00:24:36 2025
+++ pkgsrc/lang/go/version.mk   Fri Feb  7 10:17:49 2025
@@ -1,4 +1,4 @@
-# $NetBSD: version.mk,v 1.223 2025/02/06 00:24:36 riastradh Exp $
+# $NetBSD: version.mk,v 1.224 2025/02/07 10:17:49 bsiegert Exp $
 
 #
 # If bsd.prefs.mk is included before go-package.mk in a package, then this
@@ -6,8 +6,8 @@
 #
 .include "go-vars.mk"
 
-GO123_VERSION= 1.23.5
-GO122_VERSION= 1.22.11
+GO123_VERSION= 1.23.6
+GO122_VERSION= 1.22.12
 GO121_VERSION= 1.21.13
 GO120_VERSION= 1.20.14
 GO119_VERSION= 1.19.13

Index: pkgsrc/lang/go122/distinfo
diff -u pkgsrc/lang/go122/distinfo:1.14 pkgsrc/lang/go122/distinfo:1.15
--- pkgsrc/lang/go122/distinfo:1.14     Fri Jan 17 10:33:08 2025
+++ pkgsrc/lang/go122/distinfo  Fri Feb  7 10:17:49 2025
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.14 2025/01/17 10:33:08 bsiegert Exp $
+$NetBSD: distinfo,v 1.15 2025/02/07 10:17:49 bsiegert Exp $
 
-BLAKE2s (go1.22.11.src.tar.gz) = b28d7f23e094ac9b99e0a1b858ba9e76deb26f362a27f7875cbaba5a5abf17cb
-SHA512 (go1.22.11.src.tar.gz) = 40c133d6008df7c7cc3bb95a41c29f7442a6af2dd78b807007daf732471c88e2c641aed32878414d57be3904e5efa580d2ecd13fff5412ee668e753e50f1356e
-Size (go1.22.11.src.tar.gz) = 27565913 bytes
+BLAKE2s (go1.22.12.src.tar.gz) = 72a07834496d592e3aa4af763643d80ac55276fe482a086ee411bc58d346738b
+SHA512 (go1.22.12.src.tar.gz) = de498f72c398c5587abb6e6943a21b1b9835fde16dbda4d64a1ad847f5b2399ed289fe327255dcde104ad9e7f3fd6c520ddb13ee1900ba5d5c45aa5e1c1e30c8
+Size (go1.22.12.src.tar.gz) = 27566409 bytes
 SHA1 (patch-misc_ios_clangwrap.sh) = 0a06403609cb7bce2e6f65444fd322f486761afe
 SHA1 (patch-src_cmd_dist_build.go) = cbb9576f832806b0cbef121ea38ba6a54db95bc3
 SHA1 (patch-src_crypto_x509_root__bsd.go) = 0b5dead901450967109303f873a2696c65ccac35

Index: pkgsrc/lang/go123/Makefile
diff -u pkgsrc/lang/go123/Makefile:1.7 pkgsrc/lang/go123/Makefile:1.8
--- pkgsrc/lang/go123/Makefile:1.7      Thu Feb  6 00:24:37 2025
+++ pkgsrc/lang/go123/Makefile  Fri Feb  7 10:17:49 2025
@@ -1,6 +1,5 @@
-# $NetBSD: Makefile,v 1.7 2025/02/06 00:24:37 riastradh Exp $
+# $NetBSD: Makefile,v 1.8 2025/02/07 10:17:49 bsiegert Exp $
 
-PKGREVISION=   1
 .include "../../lang/go/version.mk"
 GO_BOOTSTRAP_REQD=     120
 .include "../../lang/go/bootstrap.mk"
Index: pkgsrc/lang/go123/distinfo
diff -u pkgsrc/lang/go123/distinfo:1.7 pkgsrc/lang/go123/distinfo:1.8
--- pkgsrc/lang/go123/distinfo:1.7      Fri Jan 17 10:33:09 2025
+++ pkgsrc/lang/go123/distinfo  Fri Feb  7 10:17:49 2025
@@ -1,11 +1,11 @@
-$NetBSD: distinfo,v 1.7 2025/01/17 10:33:09 bsiegert Exp $
+$NetBSD: distinfo,v 1.8 2025/02/07 10:17:49 bsiegert Exp $
 
 BLAKE2s (80344887818a2321296ce7fa71cca8ca2520611d.diff) = 80c77c55780bbd3b61f54698a5790169566a5c1c142ea9cf6b3de4ff261375f6
 SHA512 (80344887818a2321296ce7fa71cca8ca2520611d.diff) = a72fe9c2bba6191df1fb796fe55cc0fea2eb1809f7a4f148230a8be798e3b6820405e48a92a57da59d8fbe23d7d624b49cef9761852a62b4e81ba9dcaa7deaa6
 Size (80344887818a2321296ce7fa71cca8ca2520611d.diff) = 3273 bytes
-BLAKE2s (go1.23.5.src.tar.gz) = 3adb2f7d2ff3bddc8566f6b55102d51e72f12c2c2ea74fb9efcf3691c6482f81
-SHA512 (go1.23.5.src.tar.gz) = b04317afeab2d0ced7c36b8682dd32ac085d95d874cf3f614daa34859d7f7f2b75138132e7a64e237c6b4d711d5b03a4d20533f92a44840915630f4ea7cfafa2
-Size (go1.23.5.src.tar.gz) = 28179014 bytes
+BLAKE2s (go1.23.6.src.tar.gz) = 39540123071b012aca1326c326453ead7a2ac8d67e6e696ec9e10bd6ca719113
+SHA512 (go1.23.6.src.tar.gz) = c504476d42cdbcd1b6afe53c0974e82c19eb0efac974bc06d41c1641440676891cfe6416455a0cfc81fe82902a9b82ea0a1d95089c676667d05487e45f5e04e3
+Size (go1.23.6.src.tar.gz) = 28179132 bytes
 SHA1 (patch-misc_ios_clangwrap.sh) = 28ea4426336155d6720f7e16b43f0207b47a6dd8
 SHA1 (patch-src_cmd_dist_build.go) = cbb9576f832806b0cbef121ea38ba6a54db95bc3
 SHA1 (patch-src_crypto_x509_root__bsd.go) = 0b5dead901450967109303f873a2696c65ccac35