summaryrefslogtreecommitdiff
path: root/lang
diff options
context:
space:
mode:
authorbsiegert <bsiegert@pkgsrc.org>2019-09-26 18:36:46 +0000
committerbsiegert <bsiegert@pkgsrc.org>2019-09-26 18:36:46 +0000
commit431c79dace1f84fb70759dd4fdfc950c05ebd160 (patch)
treea65474e551a2ee7993c49e74b97fb11a0674ae47 /lang
parentfea29d706c2f8d595436a631dd773f062331d65d (diff)
downloadpkgsrc-431c79dace1f84fb70759dd4fdfc950c05ebd160.tar.gz
Update go112 to 1.12.10.
Commit ok'd by wiz@ for PMC. Go 1.12.10: net/http (through net/textproto) used to accept and normalize invalid HTTP/1.1 headers with a space before the colon, in violation of RFC 7230. If a Go server is used behind an uncommon reverse proxy that accepts and forwards but doesn't normalize such invalid headers, the reverse proxy and the server can interpret the headers differently. This can lead to filter bypasses or request smuggling, the latter if requests from separate clients are multiplexed onto the same upstream connection by the proxy. Such invalid headers are now rejected by Go servers, and passed without normalization to Go client applications. The issue is CVE-2019-16276 and Go issue golang.org/issue/34540. Go 1.12.9: go1.12.9 (released 2019/08/15) includes fixes to the linker, and the os and math/big packages. See the Go 1.12.9 milestone on our issue tracker for details.
Diffstat (limited to 'lang')
-rw-r--r--lang/go/version.mk4
-rw-r--r--lang/go112/PLIST5
-rw-r--r--lang/go112/distinfo10
3 files changed, 11 insertions, 8 deletions
diff --git a/lang/go/version.mk b/lang/go/version.mk
index 5914ee24901..710efa7e294 100644
--- a/lang/go/version.mk
+++ b/lang/go/version.mk
@@ -1,4 +1,4 @@
-# $NetBSD: version.mk,v 1.68 2019/09/17 04:39:20 dbj Exp $
+# $NetBSD: version.mk,v 1.69 2019/09/26 18:36:46 bsiegert Exp $
CTF_SUPPORTED= no
SSP_SUPPORTED= no
@@ -6,7 +6,7 @@ STRIP_DEBUG_SUPPORTED= no
.include "../../mk/bsd.prefs.mk"
-GO112_VERSION= 1.12.8
+GO112_VERSION= 1.12.10
GO111_VERSION= 1.11.13
GO110_VERSION= 1.10.8
GO19_VERSION= 1.9.7
diff --git a/lang/go112/PLIST b/lang/go112/PLIST
index e9b01a50ec2..1ef945c6e28 100644
--- a/lang/go112/PLIST
+++ b/lang/go112/PLIST
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.6 2019/07/14 15:19:55 bsiegert Exp $
+@comment $NetBSD: PLIST,v 1.7 2019/09/26 18:36:46 bsiegert Exp $
bin/go${GOVERSSUFFIX}
bin/gofmt${GOVERSSUFFIX}
go112/AUTHORS
@@ -549,6 +549,8 @@ go112/misc/cgo/testshared/src/iface_i/i.go
go112/misc/cgo/testshared/src/implicit/implicit.go
go112/misc/cgo/testshared/src/implicitcmd/implicitcmd.go
go112/misc/cgo/testshared/src/issue25065/a.go
+go112/misc/cgo/testshared/src/issue30768/issue30768lib/lib.go
+go112/misc/cgo/testshared/src/issue30768/x_test.go
go112/misc/cgo/testshared/src/trivial/trivial.go
go112/misc/cgo/testsigfwd/main.go
go112/misc/cgo/testso/cgoso.c
@@ -8356,6 +8358,7 @@ go112/test/fixedbugs/issue32477.go
go112/test/fixedbugs/issue32560.go
go112/test/fixedbugs/issue32680.go
go112/test/fixedbugs/issue32680.out
+go112/test/fixedbugs/issue33555.go
go112/test/fixedbugs/issue3552.dir/one.go
go112/test/fixedbugs/issue3552.dir/two.go
go112/test/fixedbugs/issue3552.go
diff --git a/lang/go112/distinfo b/lang/go112/distinfo
index 70c317e9597..1e65f3a0a11 100644
--- a/lang/go112/distinfo
+++ b/lang/go112/distinfo
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.6 2019/08/14 15:42:52 bsiegert Exp $
+$NetBSD: distinfo,v 1.7 2019/09/26 18:36:46 bsiegert Exp $
-SHA1 (go1.12.8.src.tar.gz) = f8f35a7af2795b721d62578b55f43ce638db90db
-RMD160 (go1.12.8.src.tar.gz) = e620fc04e023d88e534c32e6c8334d5c49fbdb87
-SHA512 (go1.12.8.src.tar.gz) = 193a9b08752aa2479c19f5b56fdfe2296c7e6097e0c583290f0fce754ac7571e2ff345f66b69774d8e22f2caa147a3dc15658148017b09e5e7f49fd4569373d4
-Size (go1.12.8.src.tar.gz) = 21978756 bytes
+SHA1 (go1.12.10.src.tar.gz) = 6c11be6b4cef09457b2567bd078a203fad19d675
+RMD160 (go1.12.10.src.tar.gz) = cc0a112d2a6110af11a44a317954eeab428b5c1b
+SHA512 (go1.12.10.src.tar.gz) = 9d40cf8d71daffe43f5872597b316cd1150ae640d852ff0f0be3126cc7bb40b9a0290bb02d7fabdf808f40ab3f67a56d2eaeba3b32299fa9b0a3df03899f6ac2
+Size (go1.12.10.src.tar.gz) = 21980044 bytes
SHA1 (patch-misc_io_clangwrap.sh) = cd91c47ba0fe7b6eb8009dd261c0c26c7d581c29
SHA1 (patch-src_cmd_dist_util.go) = 24e6f1b6ded842a8ce322a40e8766f7d344bc47e
SHA1 (patch-src_cmd_link_internal_ld_elf.go) = 990a54e3baf239916e4c7f0c1d54240e2898601a