diff options
author | bsiegert <bsiegert@pkgsrc.org> | 2021-07-13 10:05:08 +0000 |
---|---|---|
committer | bsiegert <bsiegert@pkgsrc.org> | 2021-07-13 10:05:08 +0000 |
commit | 81517420277b2e984a33b3ad08e366627668a204 (patch) | |
tree | 551a9d8164425942e99725dade50b97e5502c83e /lang | |
parent | 61270a901312e9f48887fcbb7efea15a1cba52fd (diff) | |
download | pkgsrc-81517420277b2e984a33b3ad08e366627668a204.tar.gz |
Update go115 to 1.15.14.
This minor release includes a security fix according to the new security policy.
crypto/tls clients can panic when provided a certificate of the wrong type for
the negotiated parameters. net/http clients performing HTTPS requests are also
affected. The panic can be triggered by an attacker in a privileged network
position without access to the server certificate's private key, as long as a
trusted ECDSA or Ed25519 certificate for the server exists (or can be issued),
or the client is configured with Config.InsecureSkipVerify. Clients that
disable all TLS_RSA cipher suites (that is, TLS 1.0–1.2 cipher
suites without ECDHE), as well as TLS 1.3-only clients, are unaffected.
This is issue 47143 and CVE-2021-34558. Thanks to Imre Rad for reporting this
issue.
Diffstat (limited to 'lang')
-rw-r--r-- | lang/go/version.mk | 4 | ||||
-rw-r--r-- | lang/go115/Makefile | 3 | ||||
-rw-r--r-- | lang/go115/PLIST | 5 | ||||
-rw-r--r-- | lang/go115/distinfo | 10 |
4 files changed, 12 insertions, 10 deletions
diff --git a/lang/go/version.mk b/lang/go/version.mk index 32747b074e5..f909a4cbb51 100644 --- a/lang/go/version.mk +++ b/lang/go/version.mk @@ -1,4 +1,4 @@ -# $NetBSD: version.mk,v 1.120 2021/06/05 12:40:07 bsiegert Exp $ +# $NetBSD: version.mk,v 1.121 2021/07/13 10:05:08 bsiegert Exp $ # # If bsd.prefs.mk is included before go-package.mk in a package, then this @@ -7,7 +7,7 @@ .include "go-vars.mk" GO116_VERSION= 1.16.5 -GO115_VERSION= 1.15.13 +GO115_VERSION= 1.15.14 GO110_VERSION= 1.10.8 GO19_VERSION= 1.9.7 GO14_VERSION= 1.4.3 diff --git a/lang/go115/Makefile b/lang/go115/Makefile index fc7b443c737..ac4e171ff8a 100644 --- a/lang/go115/Makefile +++ b/lang/go115/Makefile @@ -1,6 +1,5 @@ -# $NetBSD: Makefile,v 1.7 2021/05/24 19:52:33 wiz Exp $ +# $NetBSD: Makefile,v 1.8 2021/07/13 10:05:08 bsiegert Exp $ -PKGREVISION= 1 .include "../../lang/go/version.mk" .include "../../lang/go/bootstrap.mk" diff --git a/lang/go115/PLIST b/lang/go115/PLIST index 5dcda4af650..12f9f56591d 100644 --- a/lang/go115/PLIST +++ b/lang/go115/PLIST @@ -1,4 +1,4 @@ -@comment $NetBSD: PLIST,v 1.8 2021/06/04 16:43:21 bsiegert Exp $ +@comment $NetBSD: PLIST,v 1.9 2021/07/13 10:05:08 bsiegert Exp $ bin/go${GOVERSSUFFIX} bin/gofmt${GOVERSSUFFIX} go115/AUTHORS @@ -9016,6 +9016,9 @@ go115/test/fixedbugs/issue4618.go go115/test/fixedbugs/issue4620.go go115/test/fixedbugs/issue4654.go go115/test/fixedbugs/issue4663.go +go115/test/fixedbugs/issue46653.dir/bad/bad.go +go115/test/fixedbugs/issue46653.dir/main.go +go115/test/fixedbugs/issue46653.go go115/test/fixedbugs/issue4667.go go115/test/fixedbugs/issue4734.go go115/test/fixedbugs/issue4748.go diff --git a/lang/go115/distinfo b/lang/go115/distinfo index 2ee3f63b4c2..fde1732a945 100644 --- a/lang/go115/distinfo +++ b/lang/go115/distinfo @@ -1,9 +1,9 @@ -$NetBSD: distinfo,v 1.10 2021/06/04 16:43:21 bsiegert Exp $ +$NetBSD: distinfo,v 1.11 2021/07/13 10:05:08 bsiegert Exp $ -SHA1 (go1.15.13.src.tar.gz) = 4408218eeefe1367ca8b03a5cc3eb3d3dc164f2d -RMD160 (go1.15.13.src.tar.gz) = 27a5186dfca92ff95c55ec3652e4af03a6204232 -SHA512 (go1.15.13.src.tar.gz) = 3f77716c9721afacb27daa175e236bb25cfc93602f1531df18938fad94bf4f59e81b81f53fa977c2ebc9a912942275a1106043133fec166965e72766b1638ba1 -Size (go1.15.13.src.tar.gz) = 23039791 bytes +SHA1 (go1.15.14.src.tar.gz) = d7f349ac6af29f2790016d2c287772aca72d356c +RMD160 (go1.15.14.src.tar.gz) = 47216fbc855df6ac4c0ab32eea928cfdf50f079c +SHA512 (go1.15.14.src.tar.gz) = 2bf18efcb3a5f9e54de0a0e7ee27a689c2dc895d9403bc6f66e500358e70d1d664d7f17102126c98bd26fa2a3346ead358684e45b1a354cde8764c715064dd92 +Size (go1.15.14.src.tar.gz) = 23041432 bytes SHA1 (patch-misc_io_clangwrap.sh) = df5911c430ff6251abab12e5cc233e32fc3cd953 SHA1 (patch-src_cmd_dist_util.go) = 24e6f1b6ded842a8ce322a40e8766f7d344bc47e SHA1 (patch-src_cmd_link_internal_ld_elf.go) = 3dfcb5c824d4201fadda0cfb6b48e5938899baf0 |