CVS commit: pkgsrc/lang

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Fri Oct  8 14:47:44 UTC 2021

Modified Files:
        pkgsrc/lang/go: version.mk
        pkgsrc/lang/go117: distinfo

Log Message:
Update go117 to 1.17.2.

This minor release includes a security fix according to the new security policy.

When invoking functions from WASM modules, built using GOARCH=wasm GOOS=js,
passing very large arguments can cause portions of the module to be overwritten
with data from the arguments.

If using wasm_exec.js to execute WASM modules, users will need to replace their
copy (as described in https://golang.org/wiki/WebAssembly#getting-started)
after rebuilding any modules.

This is issue 48797 and CVE-2021-38297. Thanks to Ben Lubar for reporting this
issue.


To generate a diff of this commit:
cvs rdiff -u -r1.130 -r1.131 pkgsrc/lang/go/version.mk
cvs rdiff -u -r1.6 -r1.7 pkgsrc/lang/go117/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/go/version.mk
diff -u pkgsrc/lang/go/version.mk:1.130 pkgsrc/lang/go/version.mk:1.131
--- pkgsrc/lang/go/version.mk:1.130     Fri Oct  8 14:21:44 2021
+++ pkgsrc/lang/go/version.mk   Fri Oct  8 14:47:44 2021
@@ -1,4 +1,4 @@
-# $NetBSD: version.mk,v 1.130 2021/10/08 14:21:44 bsiegert Exp $
+# $NetBSD: version.mk,v 1.131 2021/10/08 14:47:44 bsiegert Exp $
 
 #
 # If bsd.prefs.mk is included before go-package.mk in a package, then this
@@ -6,7 +6,7 @@
 #
 .include "go-vars.mk"
 
-GO117_VERSION= 1.17.1
+GO117_VERSION= 1.17.2
 GO116_VERSION= 1.16.9
 GO110_VERSION= 1.10.8
 GO19_VERSION=  1.9.7

Index: pkgsrc/lang/go117/distinfo
diff -u pkgsrc/lang/go117/distinfo:1.6 pkgsrc/lang/go117/distinfo:1.7
--- pkgsrc/lang/go117/distinfo:1.6      Thu Oct  7 14:20:55 2021
+++ pkgsrc/lang/go117/distinfo  Fri Oct  8 14:47:44 2021
@@ -1,8 +1,9 @@
-$NetBSD: distinfo,v 1.6 2021/10/07 14:20:55 nia Exp $
+$NetBSD: distinfo,v 1.7 2021/10/08 14:47:44 bsiegert Exp $
 
-RMD160 (go1.17.1.src.tar.gz) = 6819b27b34bdf07ffe3334e4cdb6c80e504204d0
-SHA512 (go1.17.1.src.tar.gz) = 23d4e003651204c5bcc5cf41437134e07a3fe3c188eb129f2d6366a7445a7919d6a7319c57483e91b3415fd28aa55df8d58eec398434f20ce6accd587925a14b
-Size (go1.17.1.src.tar.gz) = 22181735 bytes
+SHA1 (go1.17.2.src.tar.gz) = b78350fa6e4617c1eac66dff656eda8df0a13c1f
+RMD160 (go1.17.2.src.tar.gz) = 746baea495791be0e9f4ed6a162cc4466d4ce4cd
+SHA512 (go1.17.2.src.tar.gz) = 167220293e02d6994b5cdee5909cbdbe66f692619baeb6ff9ee0d56660eb39cfd9eac2ac510f113d5222dadd5858fd6276bd961365ca42b42c07af5d24d48107
+Size (go1.17.2.src.tar.gz) = 22182111 bytes
 SHA1 (patch-misc_ios_clangwrap.sh) = 0a06403609cb7bce2e6f65444fd322f486761afe
 SHA1 (patch-src_cmd_dist_util.go) = 2d9c2f59e27672d56f5f1a0e3f9d5101a05546a7
 SHA1 (patch-src_crypto_x509_root__bsd.go) = 27636e0d8c121ccec6c46a3a82cd0e0469473a6e