CVS commit: pkgsrc/lang

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Fri Oct  8 14:21:45 UTC 2021

Modified Files:
        pkgsrc/lang/go: version.mk
        pkgsrc/lang/go116: distinfo

Log Message:
Update go116 to 1.16.9.

This minor release includes a security fix according to the new security policy.

When invoking functions from WASM modules, built using GOARCH=wasm GOOS=js,
passing very large arguments can cause portions of the module to be overwritten
with data from the arguments.

If using wasm_exec.js to execute WASM modules, users will need to replace their
copy (as described in https://golang.org/wiki/WebAssembly#getting-started)
after rebuilding any modules.

This is issue 48797 and CVE-2021-38297. Thanks to Ben Lubar for reporting this
issue.


To generate a diff of this commit:
cvs rdiff -u -r1.129 -r1.130 pkgsrc/lang/go/version.mk
cvs rdiff -u -r1.12 -r1.13 pkgsrc/lang/go116/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/go/version.mk
diff -u pkgsrc/lang/go/version.mk:1.129 pkgsrc/lang/go/version.mk:1.130
--- pkgsrc/lang/go/version.mk:1.129     Fri Sep 17 13:17:19 2021
+++ pkgsrc/lang/go/version.mk   Fri Oct  8 14:21:44 2021
@@ -1,4 +1,4 @@
-# $NetBSD: version.mk,v 1.129 2021/09/17 13:17:19 bsiegert Exp $
+# $NetBSD: version.mk,v 1.130 2021/10/08 14:21:44 bsiegert Exp $
 
 #
 # If bsd.prefs.mk is included before go-package.mk in a package, then this
@@ -7,7 +7,7 @@
 .include "go-vars.mk"
 
 GO117_VERSION= 1.17.1
-GO116_VERSION= 1.16.8
+GO116_VERSION= 1.16.9
 GO110_VERSION= 1.10.8
 GO19_VERSION=  1.9.7
 GO14_VERSION=  1.4.3

Index: pkgsrc/lang/go116/distinfo
diff -u pkgsrc/lang/go116/distinfo:1.12 pkgsrc/lang/go116/distinfo:1.13
--- pkgsrc/lang/go116/distinfo:1.12     Thu Oct  7 14:20:55 2021
+++ pkgsrc/lang/go116/distinfo  Fri Oct  8 14:21:44 2021
@@ -1,8 +1,9 @@
-$NetBSD: distinfo,v 1.12 2021/10/07 14:20:55 nia Exp $
+$NetBSD: distinfo,v 1.13 2021/10/08 14:21:44 bsiegert Exp $
 
-RMD160 (go1.16.8.src.tar.gz) = e476b83c7ac83b65f4224e4914d7af0114b16ab2
-SHA512 (go1.16.8.src.tar.gz) = 49b3b341ee3dbf2964f8e938a6d797a48e4b46e19c6c6f240038cd48c8668b76982f0c9c61e38bfdc42eb03db72d125457905cba76589d1d7d2f825bc67587e3
-Size (go1.16.8.src.tar.gz) = 20922236 bytes
+SHA1 (go1.16.9.src.tar.gz) = 624e15c01eb2219a4663e5cf7badad8b2e5a500d
+RMD160 (go1.16.9.src.tar.gz) = 26d7fee33a77331e78c2d0563dff25823d88754f
+SHA512 (go1.16.9.src.tar.gz) = e1c02ac64fcc13b94bb160c9129d5fcfa4a486df069e4f5a42b5d5827e0c82105a957a92926a1e4802e37fd5a148ffcc015e244a31367fd68cfe30c90d2de385
+Size (go1.16.9.src.tar.gz) = 20921003 bytes
 SHA1 (patch-misc_ios_clangwrap.sh) = 0a06403609cb7bce2e6f65444fd322f486761afe
 SHA1 (patch-src_cmd_dist_util.go) = 24e6f1b6ded842a8ce322a40e8766f7d344bc47e
 SHA1 (patch-src_crypto_x509_root__bsd.go) = 27636e0d8c121ccec6c46a3a82cd0e0469473a6e