pkgsrc-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[pkgsrc/trunk]: pkgsrc/lang go115: update to 1.15.15.



details:   https://anonhg.NetBSD.org/pkgsrc/rev/d4677f21114a
branches:  trunk
changeset: 456928:d4677f21114a
user:      bsiegert <bsiegert%pkgsrc.org@localhost>
date:      Wed Aug 11 16:46:48 2021 +0000

description:
go115: update to 1.15.15.

This minor release includes a security fix according to the new security
policy.

A net/http/httputil ReverseProxy can panic due to a race condition if its
Handler aborts with ErrAbortHandler, for example due to an error in copying the
response body. An attacker might be able to force the conditions leading to the
race condition.

This is issue https://golang.org/issue/46866 and CVE-2021-36221. Thanks to
Andrew Crump (VMware) for reporting this issue.

diffstat:

 lang/go/version.mk  |   4 ++--
 lang/go115/PLIST    |   3 ++-
 lang/go115/distinfo |  10 +++++-----
 3 files changed, 9 insertions(+), 8 deletions(-)

diffs (53 lines):

diff -r 49238c67b288 -r d4677f21114a lang/go/version.mk
--- a/lang/go/version.mk        Wed Aug 11 12:39:36 2021 +0000
+++ b/lang/go/version.mk        Wed Aug 11 16:46:48 2021 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: version.mk,v 1.122 2021/07/13 10:12:00 bsiegert Exp $
+# $NetBSD: version.mk,v 1.123 2021/08/11 16:46:48 bsiegert Exp $
 
 #
 # If bsd.prefs.mk is included before go-package.mk in a package, then this
@@ -7,7 +7,7 @@
 .include "go-vars.mk"
 
 GO116_VERSION= 1.16.6
-GO115_VERSION= 1.15.14
+GO115_VERSION= 1.15.15
 GO110_VERSION= 1.10.8
 GO19_VERSION=  1.9.7
 GO14_VERSION=  1.4.3
diff -r 49238c67b288 -r d4677f21114a lang/go115/PLIST
--- a/lang/go115/PLIST  Wed Aug 11 12:39:36 2021 +0000
+++ b/lang/go115/PLIST  Wed Aug 11 16:46:48 2021 +0000
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.9 2021/07/13 10:05:08 bsiegert Exp $
+@comment $NetBSD: PLIST,v 1.10 2021/08/11 16:46:48 bsiegert Exp $
 bin/go${GOVERSSUFFIX}
 bin/gofmt${GOVERSSUFFIX}
 go115/AUTHORS
@@ -2087,6 +2087,7 @@
 go115/src/cmd/go/testdata/script/list_compiled_imports.txt
 go115/src/cmd/go/testdata/script/list_constraints.txt
 go115/src/cmd/go/testdata/script/list_dedup_packages.txt
+go115/src/cmd/go/testdata/script/list_err_cycle.txt
 go115/src/cmd/go/testdata/script/list_err_stack.txt
 go115/src/cmd/go/testdata/script/list_find.txt
 go115/src/cmd/go/testdata/script/list_gofile_in_goroot.txt
diff -r 49238c67b288 -r d4677f21114a lang/go115/distinfo
--- a/lang/go115/distinfo       Wed Aug 11 12:39:36 2021 +0000
+++ b/lang/go115/distinfo       Wed Aug 11 16:46:48 2021 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.11 2021/07/13 10:05:08 bsiegert Exp $
+$NetBSD: distinfo,v 1.12 2021/08/11 16:46:48 bsiegert Exp $
 
-SHA1 (go1.15.14.src.tar.gz) = d7f349ac6af29f2790016d2c287772aca72d356c
-RMD160 (go1.15.14.src.tar.gz) = 47216fbc855df6ac4c0ab32eea928cfdf50f079c
-SHA512 (go1.15.14.src.tar.gz) = 2bf18efcb3a5f9e54de0a0e7ee27a689c2dc895d9403bc6f66e500358e70d1d664d7f17102126c98bd26fa2a3346ead358684e45b1a354cde8764c715064dd92
-Size (go1.15.14.src.tar.gz) = 23041432 bytes
+SHA1 (go1.15.15.src.tar.gz) = a59b4ccad37e88cbf5395be50e4f01a14fb2955b
+RMD160 (go1.15.15.src.tar.gz) = ff7ecfcd6163efb2177bf37a7b287366e1ae1ed8
+SHA512 (go1.15.15.src.tar.gz) = bf8a6f669d024ce77271fbc8dc1d7a727c4da85c70cad00d0baaef157e7c5d7879ea9ae71cdb04e55f9c07f5ae76655264ca8a159c971eab1cf8a8861b74e69b
+Size (go1.15.15.src.tar.gz) = 23042945 bytes
 SHA1 (patch-misc_io_clangwrap.sh) = df5911c430ff6251abab12e5cc233e32fc3cd953
 SHA1 (patch-src_cmd_dist_util.go) = 24e6f1b6ded842a8ce322a40e8766f7d344bc47e
 SHA1 (patch-src_cmd_link_internal_ld_elf.go) = 3dfcb5c824d4201fadda0cfb6b48e5938899baf0



Home | Main Index | Thread Index | Old Index