CVS commit: pkgsrc/lang

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Wed Aug 11 19:00:24 UTC 2021

Modified Files:
        pkgsrc/lang/go: version.mk
        pkgsrc/lang/go116: PLIST distinfo

Log Message:
go116: update to 1.16.7.

This minor release includes a security fix according to the new security
policy.

A net/http/httputil ReverseProxy can panic due to a race condition if its
Handler aborts with ErrAbortHandler, for example due to an error in copying the
response body. An attacker might be able to force the conditions leading to the
race condition.

This is issue https://golang.org/issue/46866 and CVE-2021-36221. Thanks to
Andrew Crump (VMware) for reporting this issue.


To generate a diff of this commit:
cvs rdiff -u -r1.123 -r1.124 pkgsrc/lang/go/version.mk
cvs rdiff -u -r1.7 -r1.8 pkgsrc/lang/go116/PLIST
cvs rdiff -u -r1.9 -r1.10 pkgsrc/lang/go116/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/go/version.mk
diff -u pkgsrc/lang/go/version.mk:1.123 pkgsrc/lang/go/version.mk:1.124
--- pkgsrc/lang/go/version.mk:1.123     Wed Aug 11 16:46:48 2021
+++ pkgsrc/lang/go/version.mk   Wed Aug 11 19:00:24 2021
@@ -1,4 +1,4 @@
-# $NetBSD: version.mk,v 1.123 2021/08/11 16:46:48 bsiegert Exp $
+# $NetBSD: version.mk,v 1.124 2021/08/11 19:00:24 bsiegert Exp $
 
 #
 # If bsd.prefs.mk is included before go-package.mk in a package, then this
@@ -6,7 +6,7 @@
 #
 .include "go-vars.mk"
 
-GO116_VERSION= 1.16.6
+GO116_VERSION= 1.16.7
 GO115_VERSION= 1.15.15
 GO110_VERSION= 1.10.8
 GO19_VERSION=  1.9.7

Index: pkgsrc/lang/go116/PLIST
diff -u pkgsrc/lang/go116/PLIST:1.7 pkgsrc/lang/go116/PLIST:1.8
--- pkgsrc/lang/go116/PLIST:1.7 Tue Jul 13 10:12:00 2021
+++ pkgsrc/lang/go116/PLIST     Wed Aug 11 19:00:24 2021
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.7 2021/07/13 10:12:00 bsiegert Exp $
+@comment $NetBSD: PLIST,v 1.8 2021/08/11 19:00:24 bsiegert Exp $
 bin/go${GOVERSSUFFIX}
 bin/gofmt${GOVERSSUFFIX}
 go116/AUTHORS
@@ -2031,6 +2031,7 @@ go116/src/cmd/go/testdata/script/list_ca
 go116/src/cmd/go/testdata/script/list_compiled_imports.txt
 go116/src/cmd/go/testdata/script/list_constraints.txt
 go116/src/cmd/go/testdata/script/list_dedup_packages.txt
+go116/src/cmd/go/testdata/script/list_err_cycle.txt
 go116/src/cmd/go/testdata/script/list_err_stack.txt
 go116/src/cmd/go/testdata/script/list_find.txt
 go116/src/cmd/go/testdata/script/list_gofile_in_goroot.txt
@@ -2179,6 +2180,7 @@ go116/src/cmd/go/testdata/script/mod_ini
 go116/src/cmd/go/testdata/script/mod_init_glide.txt
 go116/src/cmd/go/testdata/script/mod_init_path.txt
 go116/src/cmd/go/testdata/script/mod_init_tidy.txt
+go116/src/cmd/go/testdata/script/mod_install_hint.txt
 go116/src/cmd/go/testdata/script/mod_install_pkg_version.txt
 go116/src/cmd/go/testdata/script/mod_install_versioned.txt
 go116/src/cmd/go/testdata/script/mod_internal.txt
@@ -9198,6 +9200,9 @@ go116/test/fixedbugs/issue46653.dir/bad/
 go116/test/fixedbugs/issue46653.dir/main.go
 go116/test/fixedbugs/issue46653.go
 go116/test/fixedbugs/issue4667.go
+go116/test/fixedbugs/issue47185.dir/bad/bad.go
+go116/test/fixedbugs/issue47185.dir/main.go
+go116/test/fixedbugs/issue47185.go
 go116/test/fixedbugs/issue4734.go
 go116/test/fixedbugs/issue4748.go
 go116/test/fixedbugs/issue4752.go

Index: pkgsrc/lang/go116/distinfo
diff -u pkgsrc/lang/go116/distinfo:1.9 pkgsrc/lang/go116/distinfo:1.10
--- pkgsrc/lang/go116/distinfo:1.9      Tue Jul 13 10:12:00 2021
+++ pkgsrc/lang/go116/distinfo  Wed Aug 11 19:00:24 2021
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.9 2021/07/13 10:12:00 bsiegert Exp $
+$NetBSD: distinfo,v 1.10 2021/08/11 19:00:24 bsiegert Exp $
 
-SHA1 (go1.16.6.src.tar.gz) = 047772552a78bb6d20682425e38d43dc4d94ad3f
-RMD160 (go1.16.6.src.tar.gz) = 9e8e85819c17977d8b4ffbe6afe8fa00d2946269
-SHA512 (go1.16.6.src.tar.gz) = 82634763dce636c9e9cba1bbf74a669e8b88e6df095e80672f295edb82cc1fc4b8ffde91a1f56c3470f2c4d9ee0404f65146d7478b645890623f6c463513a61f
-Size (go1.16.6.src.tar.gz) = 20923044 bytes
+SHA1 (go1.16.7.src.tar.gz) = 94e3f19866c40bb73700d93625489998604d1b15
+RMD160 (go1.16.7.src.tar.gz) = b1f1b8458dfc659cfca33b61a3041408dc9fbbf7
+SHA512 (go1.16.7.src.tar.gz) = 1aab6f3dcbae71ebfa29a1d9a46613a3aa48de01cee82b48842d92abbb4ee57db019a4d47a3f12af9553c8e2a982e90114a06ee187f908f7c29245d9786b9186
+Size (go1.16.7.src.tar.gz) = 20922206 bytes
 SHA1 (patch-misc_ios_clangwrap.sh) = 0a06403609cb7bce2e6f65444fd322f486761afe
 SHA1 (patch-src_cmd_dist_util.go) = 24e6f1b6ded842a8ce322a40e8766f7d344bc47e
 SHA1 (patch-src_crypto_x509_root__bsd.go) = 27636e0d8c121ccec6c46a3a82cd0e0469473a6e