diff options
author | spz <spz@pkgsrc.org> | 2017-05-25 21:11:03 +0000 |
---|---|---|
committer | spz <spz@pkgsrc.org> | 2017-05-25 21:11:03 +0000 |
commit | 4930243bda1492fd55209214498a21d0a20f7d7d (patch) | |
tree | 2a30cddbcd1fdf5a049c32ede423618d4c6c78b7 | |
parent | fb9534219c363ad5486d44bc6a16d668ba876cf6 (diff) | |
download | pkgsrc-4930243bda1492fd55209214498a21d0a20f7d7d.tar.gz |
Pullup ticket #5433 - requested by bsiegert
lang/go: security update
Revisions pulled up:
- lang/go/Makefile 1.52
- lang/go/distinfo 1.49
- lang/go/version.mk 1.26
- lang/go/PLIST 1.31
-------------------------------------------------------------------
Module Name: pkgsrc
Committed By: bsiegert
Date: Thu May 25 09:06:43 UTC 2017
Modified Files:
pkgsrc/lang/go: Makefile distinfo version.mk
Log Message:
SECURITY: Update Go to 1.8.2, fixing CVE-2017-8932,
carry bug in x86-64 P-256.
A security-related issue was recently reported in Go's crypto/elliptic package.
To address this issue, we have just released Go 1.7.6 and Go 1.8.2.
The Go team would like to thank Vlad Krasnov and Filippo Valsorda at Cloudflare
for reporting the issue and providing a fix.
The issue affects Go's P-256 implementation on the 64-bit x86 architecture.
This is CVE-2017-8932 and was addressed by this change:
https://golang.org/cl/41070, tracked in this issue:
https://golang.org/issue/20040
To generate a diff of this commit:
cvs rdiff -u -r1.51 -r1.52 pkgsrc/lang/go/Makefile
cvs rdiff -u -r1.48 -r1.49 pkgsrc/lang/go/distinfo
cvs rdiff -u -r1.25 -r1.26 pkgsrc/lang/go/version.mk
-------------------------------------------------------------------
Module Name: pkgsrc
Committed By: wen
Date: Sun Apr 9 08:23:43 UTC 2017
Modified Files:
pkgsrc/lang/go: PLIST distinfo version.mk
Log Message:
Update to 1.8.1
Upstream changes:
go1.8.1 (released 2017/04/07) includes fixes to the compiler, linker, runtime,
+documentation, go command and the crypto/tls, encoding/xml, image/png, net,
+net/http, reflect, text/template, and time packages. See the Go 1.8.1 milestone
+on our issue tracker for details.
To generate a diff of this commit:
cvs rdiff -u -r1.30 -r1.31 pkgsrc/lang/go/PLIST
cvs rdiff -u -r1.44 -r1.45 pkgsrc/lang/go/distinfo
cvs rdiff -u -r1.23 -r1.24 pkgsrc/lang/go/version.mk
-rw-r--r-- | lang/go/Makefile | 3 | ||||
-rw-r--r-- | lang/go/PLIST | 15 | ||||
-rw-r--r-- | lang/go/distinfo | 10 | ||||
-rw-r--r-- | lang/go/version.mk | 4 |
4 files changed, 22 insertions, 10 deletions
diff --git a/lang/go/Makefile b/lang/go/Makefile index e08468a054d..b6c80d515c8 100644 --- a/lang/go/Makefile +++ b/lang/go/Makefile @@ -1,10 +1,9 @@ -# $NetBSD: Makefile,v 1.49.2.2 2017/05/06 15:19:40 bsiegert Exp $ +# $NetBSD: Makefile,v 1.49.2.3 2017/05/25 21:11:03 spz Exp $ .include "version.mk" DISTNAME= go${GO_VERSION}.src PKGNAME= go-${GO_VERSION} -PKGREVISION= 2 CATEGORIES= lang MASTER_SITES= https://storage.googleapis.com/golang/ diff --git a/lang/go/PLIST b/lang/go/PLIST index 20d7301948e..4c810f1b8de 100644 --- a/lang/go/PLIST +++ b/lang/go/PLIST @@ -1,4 +1,4 @@ -@comment $NetBSD: PLIST,v 1.30 2017/03/15 19:38:09 bsiegert Exp $ +@comment $NetBSD: PLIST,v 1.30.2.1 2017/05/25 21:11:03 spz Exp $ bin/go bin/gofmt go/AUTHORS @@ -668,6 +668,7 @@ go/pkg/bootstrap/src/bootstrap/cmd/compile/internal/ssa/lca.go go/pkg/bootstrap/src/bootstrap/cmd/compile/internal/ssa/lca_test.go go/pkg/bootstrap/src/bootstrap/cmd/compile/internal/ssa/likelyadjust.go go/pkg/bootstrap/src/bootstrap/cmd/compile/internal/ssa/location.go +go/pkg/bootstrap/src/bootstrap/cmd/compile/internal/ssa/loop_test.go go/pkg/bootstrap/src/bootstrap/cmd/compile/internal/ssa/loopbce.go go/pkg/bootstrap/src/bootstrap/cmd/compile/internal/ssa/loopreschedchecks.go go/pkg/bootstrap/src/bootstrap/cmd/compile/internal/ssa/lower.go @@ -805,6 +806,7 @@ go/pkg/bootstrap/src/bootstrap/cmd/internal/obj/x86/obj6_test.go go/pkg/bootstrap/src/bootstrap/cmd/internal/obj/zbootstrap.go go/pkg/bootstrap/src/bootstrap/cmd/internal/sys/arch.go go/pkg/bootstrap/src/bootstrap/cmd/link/doc.go +go/pkg/bootstrap/src/bootstrap/cmd/link/dwarf_test.go go/pkg/bootstrap/src/bootstrap/cmd/link/internal/amd64/asm.go go/pkg/bootstrap/src/bootstrap/cmd/link/internal/amd64/l.go go/pkg/bootstrap/src/bootstrap/cmd/link/internal/amd64/obj.go @@ -1489,6 +1491,7 @@ go/src/cmd/compile/internal/ssa/lca.go go/src/cmd/compile/internal/ssa/lca_test.go go/src/cmd/compile/internal/ssa/likelyadjust.go go/src/cmd/compile/internal/ssa/location.go +go/src/cmd/compile/internal/ssa/loop_test.go go/src/cmd/compile/internal/ssa/loopbce.go go/src/cmd/compile/internal/ssa/loopreschedchecks.go go/src/cmd/compile/internal/ssa/lower.go @@ -1932,6 +1935,7 @@ go/src/cmd/internal/objfile/pe.go go/src/cmd/internal/objfile/plan9obj.go go/src/cmd/internal/sys/arch.go go/src/cmd/link/doc.go +go/src/cmd/link/dwarf_test.go go/src/cmd/link/internal/amd64/asm.go go/src/cmd/link/internal/amd64/l.go go/src/cmd/link/internal/amd64/obj.go @@ -3258,6 +3262,7 @@ go/src/internal/syscall/windows/syscall_windows.go go/src/internal/syscall/windows/sysdll/sysdll.go go/src/internal/syscall/windows/zsyscall_windows.go go/src/internal/testenv/testenv.go +go/src/internal/testenv/testenv_cgo.go go/src/internal/testenv/testenv_notwin.go go/src/internal/testenv/testenv_windows.go go/src/internal/trace/goroutines.go @@ -5624,6 +5629,7 @@ go/test/fixedbugs/bug191.go go/test/fixedbugs/bug192.go go/test/fixedbugs/bug193.go go/test/fixedbugs/bug194.go +go/test/fixedbugs/bug19403.go go/test/fixedbugs/bug195.go go/test/fixedbugs/bug196.go go/test/fixedbugs/bug197.go @@ -6253,6 +6259,13 @@ go/test/fixedbugs/issue18725.go go/test/fixedbugs/issue18808.go go/test/fixedbugs/issue18906.go go/test/fixedbugs/issue18915.go +go/test/fixedbugs/issue19137.go +go/test/fixedbugs/issue19168.go +go/test/fixedbugs/issue19182.go +go/test/fixedbugs/issue19201.go +go/test/fixedbugs/issue19217.go +go/test/fixedbugs/issue19323.go +go/test/fixedbugs/issue19743.go go/test/fixedbugs/issue2615.go go/test/fixedbugs/issue3552.dir/one.go go/test/fixedbugs/issue3552.dir/two.go diff --git a/lang/go/distinfo b/lang/go/distinfo index 8133b5f7802..7b3fa49c566 100644 --- a/lang/go/distinfo +++ b/lang/go/distinfo @@ -1,9 +1,9 @@ -$NetBSD: distinfo,v 1.44.2.2 2017/05/06 15:19:40 bsiegert Exp $ +$NetBSD: distinfo,v 1.44.2.3 2017/05/25 21:11:03 spz Exp $ -SHA1 (go1.8.src.tar.gz) = 37945c372140c3a46c2c5b4b9ce382b6c8d88811 -RMD160 (go1.8.src.tar.gz) = 12f2840f1fd321f9d6be4dc066da6392ac30a2c3 -SHA512 (go1.8.src.tar.gz) = 9742dd8ec0364793e44a55207238c7339236a4da3a6e7cbb3b4eca45e957c7c0cb725e7d7430b9a04630285468d32dac686facfc57f3f58885b80bbb3d333ada -Size (go1.8.src.tar.gz) = 15320083 bytes +SHA1 (go1.8.2.src.tar.gz) = ee6f3a670bdabdd1c5aee5c7473c85c5bd10b851 +RMD160 (go1.8.2.src.tar.gz) = 90c7227fcc9a593c52e77126e9350b4707fd5376 +SHA512 (go1.8.2.src.tar.gz) = 7e4f5f9db9134d1d257a8573c3fd58d6c9d30975ef44a91072bcdb8884d87f0030d918f6bc16e06847d95b2d35c4d8b541d5c9023eadd12da44d9794b3c30e68 +Size (go1.8.2.src.tar.gz) = 15331437 bytes SHA1 (patch-lib_time_update.bash) = bcf565b97ae7898a9e5cef7686fe42c69bc0bba1 SHA1 (patch-misc_io_clangwrap.sh) = cd91c47ba0fe7b6eb8009dd261c0c26c7d581c29 SHA1 (patch-src_crypto_x509_root__bsd.go) = 0eca1eafa967268ae9b224be4aeda347ebc91901 diff --git a/lang/go/version.mk b/lang/go/version.mk index 2bbac4cadca..02cf6e306e4 100644 --- a/lang/go/version.mk +++ b/lang/go/version.mk @@ -1,8 +1,8 @@ -# $NetBSD: version.mk,v 1.23.2.1 2017/05/01 09:55:46 bsiegert Exp $ +# $NetBSD: version.mk,v 1.23.2.2 2017/05/25 21:11:03 spz Exp $ .include "../../mk/bsd.prefs.mk" -GO_VERSION= 1.8 +GO_VERSION= 1.8.2 GO14_VERSION= 1.4.3 ONLY_FOR_PLATFORM= *-*-i386 *-*-x86_64 *-*-*arm* |