CVS commit: pkgsrc/lang

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Tue Jul 13 10:05:08 UTC 2021

Modified Files:
        pkgsrc/lang/go: version.mk
        pkgsrc/lang/go115: Makefile PLIST distinfo

Log Message:
Update go115 to 1.15.14.

This minor release includes a security fix according to the new security policy.

crypto/tls clients can panic when provided a certificate of the wrong type for
the negotiated parameters. net/http clients performing HTTPS requests are also
affected. The panic can be triggered by an attacker in a privileged network
position without access to the server certificate's private key, as long as a
trusted ECDSA or Ed25519 certificate for the server exists (or can be issued),
or the client is configured with Config.InsecureSkipVerify. Clients that
disable all TLS_RSA cipher suites (that is, TLS 1.0–1.2 cipher
suites without ECDHE), as well as TLS 1.3-only clients, are unaffected.

This is issue 47143 and CVE-2021-34558. Thanks to Imre Rad for reporting this
issue.


To generate a diff of this commit:
cvs rdiff -u -r1.120 -r1.121 pkgsrc/lang/go/version.mk
cvs rdiff -u -r1.7 -r1.8 pkgsrc/lang/go115/Makefile
cvs rdiff -u -r1.8 -r1.9 pkgsrc/lang/go115/PLIST
cvs rdiff -u -r1.10 -r1.11 pkgsrc/lang/go115/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/go/version.mk
diff -u pkgsrc/lang/go/version.mk:1.120 pkgsrc/lang/go/version.mk:1.121
--- pkgsrc/lang/go/version.mk:1.120     Sat Jun  5 12:40:07 2021
+++ pkgsrc/lang/go/version.mk   Tue Jul 13 10:05:08 2021
@@ -1,4 +1,4 @@
-# $NetBSD: version.mk,v 1.120 2021/06/05 12:40:07 bsiegert Exp $
+# $NetBSD: version.mk,v 1.121 2021/07/13 10:05:08 bsiegert Exp $
 
 #
 # If bsd.prefs.mk is included before go-package.mk in a package, then this
@@ -7,7 +7,7 @@
 .include "go-vars.mk"
 
 GO116_VERSION= 1.16.5
-GO115_VERSION= 1.15.13
+GO115_VERSION= 1.15.14
 GO110_VERSION= 1.10.8
 GO19_VERSION=  1.9.7
 GO14_VERSION=  1.4.3

Index: pkgsrc/lang/go115/Makefile
diff -u pkgsrc/lang/go115/Makefile:1.7 pkgsrc/lang/go115/Makefile:1.8
--- pkgsrc/lang/go115/Makefile:1.7      Mon May 24 19:52:33 2021
+++ pkgsrc/lang/go115/Makefile  Tue Jul 13 10:05:08 2021
@@ -1,6 +1,5 @@
-# $NetBSD: Makefile,v 1.7 2021/05/24 19:52:33 wiz Exp $
+# $NetBSD: Makefile,v 1.8 2021/07/13 10:05:08 bsiegert Exp $
 
-PKGREVISION= 1
 .include "../../lang/go/version.mk"
 .include "../../lang/go/bootstrap.mk"
 

Index: pkgsrc/lang/go115/PLIST
diff -u pkgsrc/lang/go115/PLIST:1.8 pkgsrc/lang/go115/PLIST:1.9
--- pkgsrc/lang/go115/PLIST:1.8 Fri Jun  4 16:43:21 2021
+++ pkgsrc/lang/go115/PLIST     Tue Jul 13 10:05:08 2021
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.8 2021/06/04 16:43:21 bsiegert Exp $
+@comment $NetBSD: PLIST,v 1.9 2021/07/13 10:05:08 bsiegert Exp $
 bin/go${GOVERSSUFFIX}
 bin/gofmt${GOVERSSUFFIX}
 go115/AUTHORS
@@ -9016,6 +9016,9 @@ go115/test/fixedbugs/issue4618.go
 go115/test/fixedbugs/issue4620.go
 go115/test/fixedbugs/issue4654.go
 go115/test/fixedbugs/issue4663.go
+go115/test/fixedbugs/issue46653.dir/bad/bad.go
+go115/test/fixedbugs/issue46653.dir/main.go
+go115/test/fixedbugs/issue46653.go
 go115/test/fixedbugs/issue4667.go
 go115/test/fixedbugs/issue4734.go
 go115/test/fixedbugs/issue4748.go

Index: pkgsrc/lang/go115/distinfo
diff -u pkgsrc/lang/go115/distinfo:1.10 pkgsrc/lang/go115/distinfo:1.11
--- pkgsrc/lang/go115/distinfo:1.10     Fri Jun  4 16:43:21 2021
+++ pkgsrc/lang/go115/distinfo  Tue Jul 13 10:05:08 2021
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.10 2021/06/04 16:43:21 bsiegert Exp $
+$NetBSD: distinfo,v 1.11 2021/07/13 10:05:08 bsiegert Exp $
 
-SHA1 (go1.15.13.src.tar.gz) = 4408218eeefe1367ca8b03a5cc3eb3d3dc164f2d
-RMD160 (go1.15.13.src.tar.gz) = 27a5186dfca92ff95c55ec3652e4af03a6204232
-SHA512 (go1.15.13.src.tar.gz) = 3f77716c9721afacb27daa175e236bb25cfc93602f1531df18938fad94bf4f59e81b81f53fa977c2ebc9a912942275a1106043133fec166965e72766b1638ba1
-Size (go1.15.13.src.tar.gz) = 23039791 bytes
+SHA1 (go1.15.14.src.tar.gz) = d7f349ac6af29f2790016d2c287772aca72d356c
+RMD160 (go1.15.14.src.tar.gz) = 47216fbc855df6ac4c0ab32eea928cfdf50f079c
+SHA512 (go1.15.14.src.tar.gz) = 2bf18efcb3a5f9e54de0a0e7ee27a689c2dc895d9403bc6f66e500358e70d1d664d7f17102126c98bd26fa2a3346ead358684e45b1a354cde8764c715064dd92
+Size (go1.15.14.src.tar.gz) = 23041432 bytes
 SHA1 (patch-misc_io_clangwrap.sh) = df5911c430ff6251abab12e5cc233e32fc3cd953
 SHA1 (patch-src_cmd_dist_util.go) = 24e6f1b6ded842a8ce322a40e8766f7d344bc47e
 SHA1 (patch-src_cmd_link_internal_ld_elf.go) = 3dfcb5c824d4201fadda0cfb6b48e5938899baf0