pkgsrc-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[pkgsrc/trunk]: pkgsrc/lang go117: update to 1.17.13 (security).



details:   https://anonhg.NetBSD.org/pkgsrc/rev/d57b93dadcf6
branches:  trunk
changeset: 383129:d57b93dadcf6
user:      bsiegert <bsiegert%pkgsrc.org@localhost>
date:      Fri Aug 12 15:48:35 2022 +0000

description:
go117: update to 1.17.13 (security).

1 security fix following the security policy:

encoding/gob & math/big: decoding big.Float and big.Rat can panic

Decoding big.Float and big.Rat types can panic if the encoded message is too
short.
This is CVE-2022-32189 and Go issue https://go.dev/issue/53871.

diffstat:

 lang/go/version.mk  |  4 ++--
 lang/go117/PLIST    |  5 ++++-
 lang/go117/distinfo |  8 ++++----
 3 files changed, 10 insertions(+), 7 deletions(-)

diffs (55 lines):

diff -r 332969a2c42b -r d57b93dadcf6 lang/go/version.mk
--- a/lang/go/version.mk        Fri Aug 12 15:02:24 2022 +0000
+++ b/lang/go/version.mk        Fri Aug 12 15:48:35 2022 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: version.mk,v 1.153 2022/07/13 15:02:02 bsiegert Exp $
+# $NetBSD: version.mk,v 1.154 2022/08/12 15:48:35 bsiegert Exp $
 
 #
 # If bsd.prefs.mk is included before go-package.mk in a package, then this
@@ -7,7 +7,7 @@
 .include "go-vars.mk"
 
 GO118_VERSION= 1.18.4
-GO117_VERSION= 1.17.12
+GO117_VERSION= 1.17.13
 GO116_VERSION= 1.16.15
 GO110_VERSION= 1.10.8
 GO19_VERSION=  1.9.7
diff -r 332969a2c42b -r d57b93dadcf6 lang/go117/PLIST
--- a/lang/go117/PLIST  Fri Aug 12 15:02:24 2022 +0000
+++ b/lang/go117/PLIST  Fri Aug 12 15:48:35 2022 +0000
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.11 2022/07/13 14:14:18 bsiegert Exp $
+@comment $NetBSD: PLIST,v 1.12 2022/08/12 15:48:35 bsiegert Exp $
 bin/go${GOVERSSUFFIX}
 bin/gofmt${GOVERSSUFFIX}
 go117/AUTHORS
@@ -10066,8 +10066,11 @@
 go117/test/fixedbugs/issue5291.dir/pkg1.go
 go117/test/fixedbugs/issue5291.dir/prog.go
 go117/test/fixedbugs/issue5291.go
+go117/test/fixedbugs/issue52953.go
 go117/test/fixedbugs/issue53454.go
 go117/test/fixedbugs/issue5358.go
+go117/test/fixedbugs/issue53600.go
+go117/test/fixedbugs/issue53600.out
 go117/test/fixedbugs/issue5373.go
 go117/test/fixedbugs/issue5470.dir/a.go
 go117/test/fixedbugs/issue5470.dir/b.go
diff -r 332969a2c42b -r d57b93dadcf6 lang/go117/distinfo
--- a/lang/go117/distinfo       Fri Aug 12 15:02:24 2022 +0000
+++ b/lang/go117/distinfo       Fri Aug 12 15:48:35 2022 +0000
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.18 2022/07/13 14:14:18 bsiegert Exp $
+$NetBSD: distinfo,v 1.19 2022/08/12 15:48:35 bsiegert Exp $
 
-BLAKE2s (go1.17.12.src.tar.gz) = 061cbbc13a599a2bba01fccd6c6686c5174f4f4f6cbac8cb515ffd233ef6ad2a
-SHA512 (go1.17.12.src.tar.gz) = d2bcea2a33723af5c2ae871f5c44694c69d37c74c62e81eddeaf4bfedf124feea2752997d3a359990071bf01f88942fc66b21cb092385946ad4ae9410854c8b9
-Size (go1.17.12.src.tar.gz) = 22205674 bytes
+BLAKE2s (go1.17.13.src.tar.gz) = 5c01becc260a43790a30faf468deacb8d2185292effa84f402fca3a57bbb2e64
+SHA512 (go1.17.13.src.tar.gz) = 2820bdd679fdb5e37d4c601b26c246bab23d4e8e1b226ac37c38e90a68b693e877bff944275eb25e3296ee772e7b40ef7d71dd49cca524df4cb8e721bfb50c33
+Size (go1.17.13.src.tar.gz) = 22206518 bytes
 SHA1 (patch-misc_ios_clangwrap.sh) = 0a06403609cb7bce2e6f65444fd322f486761afe
 SHA1 (patch-src_cmd_dist_util.go) = 2d9c2f59e27672d56f5f1a0e3f9d5101a05546a7
 SHA1 (patch-src_crypto_x509_root__bsd.go) = 27636e0d8c121ccec6c46a3a82cd0e0469473a6e



Home | Main Index | Thread Index | Old Index