CVS commit: pkgsrc/lang

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Wed Aug 11 16:46:48 UTC 2021

Modified Files:
        pkgsrc/lang/go: version.mk
        pkgsrc/lang/go115: PLIST distinfo

Log Message:
go115: update to 1.15.15.

This minor release includes a security fix according to the new security
policy.

A net/http/httputil ReverseProxy can panic due to a race condition if its
Handler aborts with ErrAbortHandler, for example due to an error in copying the
response body. An attacker might be able to force the conditions leading to the
race condition.

This is issue https://golang.org/issue/46866 and CVE-2021-36221. Thanks to
Andrew Crump (VMware) for reporting this issue.


To generate a diff of this commit:
cvs rdiff -u -r1.122 -r1.123 pkgsrc/lang/go/version.mk
cvs rdiff -u -r1.9 -r1.10 pkgsrc/lang/go115/PLIST
cvs rdiff -u -r1.11 -r1.12 pkgsrc/lang/go115/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/go/version.mk
diff -u pkgsrc/lang/go/version.mk:1.122 pkgsrc/lang/go/version.mk:1.123
--- pkgsrc/lang/go/version.mk:1.122     Tue Jul 13 10:12:00 2021
+++ pkgsrc/lang/go/version.mk   Wed Aug 11 16:46:48 2021
@@ -1,4 +1,4 @@
-# $NetBSD: version.mk,v 1.122 2021/07/13 10:12:00 bsiegert Exp $
+# $NetBSD: version.mk,v 1.123 2021/08/11 16:46:48 bsiegert Exp $
 
 #
 # If bsd.prefs.mk is included before go-package.mk in a package, then this
@@ -7,7 +7,7 @@
 .include "go-vars.mk"
 
 GO116_VERSION= 1.16.6
-GO115_VERSION= 1.15.14
+GO115_VERSION= 1.15.15
 GO110_VERSION= 1.10.8
 GO19_VERSION=  1.9.7
 GO14_VERSION=  1.4.3

Index: pkgsrc/lang/go115/PLIST
diff -u pkgsrc/lang/go115/PLIST:1.9 pkgsrc/lang/go115/PLIST:1.10
--- pkgsrc/lang/go115/PLIST:1.9 Tue Jul 13 10:05:08 2021
+++ pkgsrc/lang/go115/PLIST     Wed Aug 11 16:46:48 2021
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.9 2021/07/13 10:05:08 bsiegert Exp $
+@comment $NetBSD: PLIST,v 1.10 2021/08/11 16:46:48 bsiegert Exp $
 bin/go${GOVERSSUFFIX}
 bin/gofmt${GOVERSSUFFIX}
 go115/AUTHORS
@@ -2087,6 +2087,7 @@ go115/src/cmd/go/testdata/script/list_ca
 go115/src/cmd/go/testdata/script/list_compiled_imports.txt
 go115/src/cmd/go/testdata/script/list_constraints.txt
 go115/src/cmd/go/testdata/script/list_dedup_packages.txt
+go115/src/cmd/go/testdata/script/list_err_cycle.txt
 go115/src/cmd/go/testdata/script/list_err_stack.txt
 go115/src/cmd/go/testdata/script/list_find.txt
 go115/src/cmd/go/testdata/script/list_gofile_in_goroot.txt

Index: pkgsrc/lang/go115/distinfo
diff -u pkgsrc/lang/go115/distinfo:1.11 pkgsrc/lang/go115/distinfo:1.12
--- pkgsrc/lang/go115/distinfo:1.11     Tue Jul 13 10:05:08 2021
+++ pkgsrc/lang/go115/distinfo  Wed Aug 11 16:46:48 2021
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.11 2021/07/13 10:05:08 bsiegert Exp $
+$NetBSD: distinfo,v 1.12 2021/08/11 16:46:48 bsiegert Exp $
 
-SHA1 (go1.15.14.src.tar.gz) = d7f349ac6af29f2790016d2c287772aca72d356c
-RMD160 (go1.15.14.src.tar.gz) = 47216fbc855df6ac4c0ab32eea928cfdf50f079c
-SHA512 (go1.15.14.src.tar.gz) = 2bf18efcb3a5f9e54de0a0e7ee27a689c2dc895d9403bc6f66e500358e70d1d664d7f17102126c98bd26fa2a3346ead358684e45b1a354cde8764c715064dd92
-Size (go1.15.14.src.tar.gz) = 23041432 bytes
+SHA1 (go1.15.15.src.tar.gz) = a59b4ccad37e88cbf5395be50e4f01a14fb2955b
+RMD160 (go1.15.15.src.tar.gz) = ff7ecfcd6163efb2177bf37a7b287366e1ae1ed8
+SHA512 (go1.15.15.src.tar.gz) = bf8a6f669d024ce77271fbc8dc1d7a727c4da85c70cad00d0baaef157e7c5d7879ea9ae71cdb04e55f9c07f5ae76655264ca8a159c971eab1cf8a8861b74e69b
+Size (go1.15.15.src.tar.gz) = 23042945 bytes
 SHA1 (patch-misc_io_clangwrap.sh) = df5911c430ff6251abab12e5cc233e32fc3cd953
 SHA1 (patch-src_cmd_dist_util.go) = 24e6f1b6ded842a8ce322a40e8766f7d344bc47e
 SHA1 (patch-src_cmd_link_internal_ld_elf.go) = 3dfcb5c824d4201fadda0cfb6b48e5938899baf0