Received: by mail.netbsd.org (Postfix, from userid 605) id 981E284E69; Fri, 12 Aug 2022 15:48:37 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id D28CD84E67 for ; Fri, 12 Aug 2022 15:48:36 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([127.0.0.1]) by localhost (mail.netbsd.org [127.0.0.1]) (amavisd-new, port 10025) with ESMTP id i4-DZIINzh5z for ; Fri, 12 Aug 2022 15:48:36 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.NetBSD.org [IPv6:2001:470:a085:999:28c:faff:fe03:5984]) by mail.netbsd.org (Postfix) with ESMTP id 3AEDC84C71 for ; Fri, 12 Aug 2022 15:48:36 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id 2EA1AFB1A; Fri, 12 Aug 2022 15:48:36 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_166031931634040" MIME-Version: 1.0 Date: Fri, 12 Aug 2022 15:48:36 +0000 From: "Benny Siegert" Subject: CVS commit: pkgsrc/lang To: pkgsrc-changes@NetBSD.org Reply-To: bsiegert@netbsd.org X-Mailer: log_accum Message-Id: <20220812154836.2EA1AFB1A@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_166031931634040 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: bsiegert Date: Fri Aug 12 15:48:36 UTC 2022 Modified Files: pkgsrc/lang/go: version.mk pkgsrc/lang/go117: PLIST distinfo Log Message: go117: update to 1.17.13 (security). 1 security fix following the security policy: encoding/gob & math/big: decoding big.Float and big.Rat can panic Decoding big.Float and big.Rat types can panic if the encoded message is too short. This is CVE-2022-32189 and Go issue https://go.dev/issue/53871. To generate a diff of this commit: cvs rdiff -u -r1.153 -r1.154 pkgsrc/lang/go/version.mk cvs rdiff -u -r1.11 -r1.12 pkgsrc/lang/go117/PLIST cvs rdiff -u -r1.18 -r1.19 pkgsrc/lang/go117/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_166031931634040 Content-Disposition: inline Content-Length: 2771 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/lang/go/version.mk diff -u pkgsrc/lang/go/version.mk:1.153 pkgsrc/lang/go/version.mk:1.154 --- pkgsrc/lang/go/version.mk:1.153 Wed Jul 13 15:02:02 2022 +++ pkgsrc/lang/go/version.mk Fri Aug 12 15:48:35 2022 @@ -1,4 +1,4 @@ -# $NetBSD: version.mk,v 1.153 2022/07/13 15:02:02 bsiegert Exp $ +# $NetBSD: version.mk,v 1.154 2022/08/12 15:48:35 bsiegert Exp $ # # If bsd.prefs.mk is included before go-package.mk in a package, then this @@ -7,7 +7,7 @@ .include "go-vars.mk" GO118_VERSION= 1.18.4 -GO117_VERSION= 1.17.12 +GO117_VERSION= 1.17.13 GO116_VERSION= 1.16.15 GO110_VERSION= 1.10.8 GO19_VERSION= 1.9.7 Index: pkgsrc/lang/go117/PLIST diff -u pkgsrc/lang/go117/PLIST:1.11 pkgsrc/lang/go117/PLIST:1.12 --- pkgsrc/lang/go117/PLIST:1.11 Wed Jul 13 14:14:18 2022 +++ pkgsrc/lang/go117/PLIST Fri Aug 12 15:48:35 2022 @@ -1,4 +1,4 @@ -@comment $NetBSD: PLIST,v 1.11 2022/07/13 14:14:18 bsiegert Exp $ +@comment $NetBSD: PLIST,v 1.12 2022/08/12 15:48:35 bsiegert Exp $ bin/go${GOVERSSUFFIX} bin/gofmt${GOVERSSUFFIX} go117/AUTHORS @@ -10066,8 +10066,11 @@ go117/test/fixedbugs/issue5260.go go117/test/fixedbugs/issue5291.dir/pkg1.go go117/test/fixedbugs/issue5291.dir/prog.go go117/test/fixedbugs/issue5291.go +go117/test/fixedbugs/issue52953.go go117/test/fixedbugs/issue53454.go go117/test/fixedbugs/issue5358.go +go117/test/fixedbugs/issue53600.go +go117/test/fixedbugs/issue53600.out go117/test/fixedbugs/issue5373.go go117/test/fixedbugs/issue5470.dir/a.go go117/test/fixedbugs/issue5470.dir/b.go Index: pkgsrc/lang/go117/distinfo diff -u pkgsrc/lang/go117/distinfo:1.18 pkgsrc/lang/go117/distinfo:1.19 --- pkgsrc/lang/go117/distinfo:1.18 Wed Jul 13 14:14:18 2022 +++ pkgsrc/lang/go117/distinfo Fri Aug 12 15:48:35 2022 @@ -1,8 +1,8 @@ -$NetBSD: distinfo,v 1.18 2022/07/13 14:14:18 bsiegert Exp $ +$NetBSD: distinfo,v 1.19 2022/08/12 15:48:35 bsiegert Exp $ -BLAKE2s (go1.17.12.src.tar.gz) = 061cbbc13a599a2bba01fccd6c6686c5174f4f4f6cbac8cb515ffd233ef6ad2a -SHA512 (go1.17.12.src.tar.gz) = d2bcea2a33723af5c2ae871f5c44694c69d37c74c62e81eddeaf4bfedf124feea2752997d3a359990071bf01f88942fc66b21cb092385946ad4ae9410854c8b9 -Size (go1.17.12.src.tar.gz) = 22205674 bytes +BLAKE2s (go1.17.13.src.tar.gz) = 5c01becc260a43790a30faf468deacb8d2185292effa84f402fca3a57bbb2e64 +SHA512 (go1.17.13.src.tar.gz) = 2820bdd679fdb5e37d4c601b26c246bab23d4e8e1b226ac37c38e90a68b693e877bff944275eb25e3296ee772e7b40ef7d71dd49cca524df4cb8e721bfb50c33 +Size (go1.17.13.src.tar.gz) = 22206518 bytes SHA1 (patch-misc_ios_clangwrap.sh) = 0a06403609cb7bce2e6f65444fd322f486761afe SHA1 (patch-src_cmd_dist_util.go) = 2d9c2f59e27672d56f5f1a0e3f9d5101a05546a7 SHA1 (patch-src_crypto_x509_root__bsd.go) = 27636e0d8c121ccec6c46a3a82cd0e0469473a6e --_----------=_166031931634040--