CVS commit: pkgsrc/lang

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Sat Aug 12 13:02:54 UTC 2023

Modified Files:
        pkgsrc/lang/go: version.mk
        pkgsrc/lang/go119: Makefile distinfo

Log Message:
Update go119 to 1.19.12 (security).

crypto/tls: restrict RSA keys in certificates to <= 8192 bits

Extremely large RSA keys in certificate chains can cause a client/server
to expend significant CPU time verifying signatures. Limit this by
restricting the size of RSA keys transmitted during handshakes to <=
8192 bits.

Based on a survey of publicly trusted RSA keys, there are currently only
three certificates in circulation with keys larger than this, and all
three appear to be test certificates that are not actively deployed. It
is possible there are larger keys in use in private PKIs, but we target
the web PKI, so causing breakage here in the interests of increasing the
default safety of users of crypto/tls seems reasonable.

Thanks to Mateusz Poliwczak for reporting this issue.


To generate a diff of this commit:
cvs rdiff -u -r1.183 -r1.184 pkgsrc/lang/go/version.mk
cvs rdiff -u -r1.5 -r1.6 pkgsrc/lang/go119/Makefile
cvs rdiff -u -r1.13 -r1.14 pkgsrc/lang/go119/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/go/version.mk
diff -u pkgsrc/lang/go/version.mk:1.183 pkgsrc/lang/go/version.mk:1.184
--- pkgsrc/lang/go/version.mk:1.183     Sat Jul 15 10:40:37 2023
+++ pkgsrc/lang/go/version.mk   Sat Aug 12 13:02:54 2023
@@ -1,4 +1,4 @@
-# $NetBSD: version.mk,v 1.183 2023/07/15 10:40:37 bsiegert Exp $
+# $NetBSD: version.mk,v 1.184 2023/08/12 13:02:54 bsiegert Exp $
 
 #
 # If bsd.prefs.mk is included before go-package.mk in a package, then this
@@ -7,7 +7,7 @@
 .include "go-vars.mk"
 
 GO120_VERSION= 1.20.6
-GO119_VERSION= 1.19.11
+GO119_VERSION= 1.19.12
 GO118_VERSION= 1.18.10
 GO14_VERSION=  1.4.3
 

Index: pkgsrc/lang/go119/Makefile
diff -u pkgsrc/lang/go119/Makefile:1.5 pkgsrc/lang/go119/Makefile:1.6
--- pkgsrc/lang/go119/Makefile:1.5      Sat Jul 15 10:52:59 2023
+++ pkgsrc/lang/go119/Makefile  Sat Aug 12 13:02:54 2023
@@ -1,6 +1,5 @@
-# $NetBSD: Makefile,v 1.5 2023/07/15 10:52:59 bsiegert Exp $
+# $NetBSD: Makefile,v 1.6 2023/08/12 13:02:54 bsiegert Exp $
 
-PKGREVISION= 1
 .include "../../lang/go/version.mk"
 .include "../../lang/go/bootstrap.mk"
 

Index: pkgsrc/lang/go119/distinfo
diff -u pkgsrc/lang/go119/distinfo:1.13 pkgsrc/lang/go119/distinfo:1.14
--- pkgsrc/lang/go119/distinfo:1.13     Sat Jul 15 10:35:14 2023
+++ pkgsrc/lang/go119/distinfo  Sat Aug 12 13:02:54 2023
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.13 2023/07/15 10:35:14 bsiegert Exp $
+$NetBSD: distinfo,v 1.14 2023/08/12 13:02:54 bsiegert Exp $
 
-BLAKE2s (go1.19.11.src.tar.gz) = 1e7f9fcb9e9fe1ccedaded7d9a550c1af4bfe0b0e7b2c0763193646061ce7e27
-SHA512 (go1.19.11.src.tar.gz) = da95a1f007a1aff3bd6eeb4b7560654e1ed990e9f6d14663c5309e72714718287a2eb2937f9ec9a041adf384454a2a3bbf8f1671f11c4bd55c76d95e03e7538b
-Size (go1.19.11.src.tar.gz) = 26568253 bytes
+BLAKE2s (go1.19.12.src.tar.gz) = a9c0766535f14e96d143ac8271613f61fb3feaac3c6834d3a6c9b502d137f224
+SHA512 (go1.19.12.src.tar.gz) = 15488e6f9ce86a4ca5650bb9df7845abb11ada0d11fb9a1b048f8c1f7047ad677b45e6c4026eff41c81a14adaa1bf78826f8e81000e7083dbbb6055a31b894e1
+Size (go1.19.12.src.tar.gz) = 26575152 bytes
 SHA1 (patch-misc_ios_clangwrap.sh) = 0a06403609cb7bce2e6f65444fd322f486761afe
 SHA1 (patch-src_cmd_dist_util.go) = 2d9c2f59e27672d56f5f1a0e3f9d5101a05546a7
 SHA1 (patch-src_crypto_x509_root__bsd.go) = 0b5dead901450967109303f873a2696c65ccac35