CVS commit: pkgsrc/lang

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Tue Oct 20 20:26:45 UTC 2026

Modified Files:
        pkgsrc/lang/go: version.mk
        pkgsrc/lang/go126: distinfo
        pkgsrc/lang/go127: distinfo

Log Message:
go: update to 1.27.3 and 1.26.10 (urgent security release)

These releases include 1 security fix following the security policy
<https://go.dev/doc/security/policy>:

- crypto/x509: mitigation for security concerns with a specific Certificate
  Authority

  We're blocking trust in a small set of intermediate certificates due to
  specific security concerns around their operation.

  Verify will now filter out chains which contain these intermediates,
  preventing them from being returned to the caller.

  We highly recommend immediately upgrading to this release.

  This is CVE-2026-111943 and Go issue https://go.dev/issue/82345.

View the release notes for more information:
https://go.dev/doc/devel/release#go1.27.3


To generate a diff of this commit:
cvs rdiff -u -r1.257 -r1.258 pkgsrc/lang/go/version.mk
cvs rdiff -u -r1.10 -r1.11 pkgsrc/lang/go126/distinfo
cvs rdiff -u -r1.3 -r1.4 pkgsrc/lang/go127/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/go/version.mk
diff -u pkgsrc/lang/go/version.mk:1.257 pkgsrc/lang/go/version.mk:1.258
--- pkgsrc/lang/go/version.mk:1.257     Tue Oct 13 18:36:05 2026
+++ pkgsrc/lang/go/version.mk   Tue Oct 20 20:26:44 2026
@@ -1,4 +1,4 @@
-# $NetBSD: version.mk,v 1.257 2026/10/13 18:36:05 bsiegert Exp $
+# $NetBSD: version.mk,v 1.258 2026/10/20 20:26:44 bsiegert Exp $
 
 #
 # If bsd.prefs.mk is included before go-package.mk in a package, then this
@@ -6,8 +6,8 @@
 #
 .include "go-vars.mk"
 
-GO127_VERSION= 1.27.2
-GO126_VERSION= 1.26.9
+GO127_VERSION= 1.27.3
+GO126_VERSION= 1.26.10
 GO125_VERSION= 1.25.14
 GO124_VERSION= 1.24.13
 GO123_VERSION= 1.23.12

Index: pkgsrc/lang/go126/distinfo
diff -u pkgsrc/lang/go126/distinfo:1.10 pkgsrc/lang/go126/distinfo:1.11
--- pkgsrc/lang/go126/distinfo:1.10     Tue Oct 13 18:36:05 2026
+++ pkgsrc/lang/go126/distinfo  Tue Oct 20 20:26:44 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.10 2026/10/13 18:36:05 bsiegert Exp $
+$NetBSD: distinfo,v 1.11 2026/10/20 20:26:44 bsiegert Exp $
 
-BLAKE2s (go1.26.9.src.tar.gz) = 227d4c63fa401851502e0314e55a4e25fbbc91951a7f467dc02ffee7af4564cc
-SHA512 (go1.26.9.src.tar.gz) = cb896e85fa0d7d1dc3d486918651dfa697158e93e2e1f1e564101ff01a415f54385421d771b1edff5fdaaf58d1fd0a2191728ed0c8c8bacf459ff8ce46aa50ba
-Size (go1.26.9.src.tar.gz) = 34162146 bytes
+BLAKE2s (go1.26.10.src.tar.gz) = 3e01a840b0738fe754af414be33edf79e134e29edda5000b05bcded599a2c04b
+SHA512 (go1.26.10.src.tar.gz) = 0de2cc2c331ea0ca4b3bb41b33d6bad3131c8063cd5ae7ddd1ea9ab974fa9a472cb504a88b68cb32b609dca4157c61b1b30d3029186c7bc00559a75cc254ec86
+Size (go1.26.10.src.tar.gz) = 34164741 bytes
 SHA1 (patch-misc_ios_clangwrap.sh) = 28ea4426336155d6720f7e16b43f0207b47a6dd8
 SHA1 (patch-src_cmd_dist_build.go) = cbb9576f832806b0cbef121ea38ba6a54db95bc3
 SHA1 (patch-src_crypto_x509_root__bsd.go) = 0b5dead901450967109303f873a2696c65ccac35

Index: pkgsrc/lang/go127/distinfo
diff -u pkgsrc/lang/go127/distinfo:1.3 pkgsrc/lang/go127/distinfo:1.4
--- pkgsrc/lang/go127/distinfo:1.3      Tue Oct 13 18:36:05 2026
+++ pkgsrc/lang/go127/distinfo  Tue Oct 20 20:26:44 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.3 2026/10/13 18:36:05 bsiegert Exp $
+$NetBSD: distinfo,v 1.4 2026/10/20 20:26:44 bsiegert Exp $
 
-BLAKE2s (go1.27.2.src.tar.gz) = b2e1e8d469d92cf22a6a4dc756366dd9877c34af8b14671fd973ff7cd0d973c5
-SHA512 (go1.27.2.src.tar.gz) = c6b7d28bf670cd01ddb0612e18e639719c423c2891da626393b58038b8fa99afd1511a7cfb8bfe8f4934cb7ddb7bd2b82a3d151fbd3be419d52e86157309a359
-Size (go1.27.2.src.tar.gz) = 35134614 bytes
+BLAKE2s (go1.27.3.src.tar.gz) = 5da0317fa49d619e5f7cc9f10815c9b426cf614821393a075829d63af04f7b68
+SHA512 (go1.27.3.src.tar.gz) = dc84444e0e5e5d4f7bc00f4323ac88c2efa0ce2af4a6e3b3e60325a694389c7ec85ff3aaa9d80df9ff07a2c32620ba57b0c787475f44d80c57c0d22b5c63844c
+Size (go1.27.3.src.tar.gz) = 35134035 bytes
 SHA1 (patch-misc_ios_clangwrap.sh) = 28ea4426336155d6720f7e16b43f0207b47a6dd8
 SHA1 (patch-src_cmd_dist_build.go) = cbb9576f832806b0cbef121ea38ba6a54db95bc3
 SHA1 (patch-src_crypto_x509_root__bsd.go) = 0b5dead901450967109303f873a2696c65ccac35