Fri Sep 26 13:54:28 2014 UTC ()
Update to 1.3.2 for a security fix:

We've just released Go version 1.3.2, a minor point release.

This release includes bug fixes to cgo and the crypto/tls package.
    https://golang.org/doc/devel/release.html#go1.3.minor

The crpyto/tls fix addresses a security bug that affects programs
that use crypto/tls to implement a TLS server from Go 1.1 onwards.
If the server enables TLS client authentication using certificates
(this is rare) and explicitly sets SessionTicketsDisabled to true
in the tls.Config, then a malicious client can falsely assert
ownership of any client certificate it wishes. This issue was
discovered internally and there is no evidence of exploitation.


(wiz)
diff -r1.17 -r1.18 pkgsrc/lang/go/Makefile
diff -r1.11 -r1.12 pkgsrc/lang/go/PLIST
diff -r1.12 -r1.13 pkgsrc/lang/go/distinfo
cvs diff -r1.17 -r1.18 pkgsrc/lang/go/Makefile (expand / switch to unified diff)

--- pkgsrc/lang/go/Makefile 2014/08/17 15:17:42 1.17
+++ pkgsrc/lang/go/Makefile 2014/09/26 13:54:28 1.18
@@ -1,16 +1,16 @@ @@ -1,16 +1,16 @@
1# $NetBSD: Makefile,v 1.17 2014/08/17 15:17:42 wiz Exp $ 1# $NetBSD: Makefile,v 1.18 2014/09/26 13:54:28 wiz Exp $
2 2
3VERSION= 1.3.1 3VERSION= 1.3.2
4DISTNAME= go${VERSION}.src 4DISTNAME= go${VERSION}.src
5PKGNAME= go-${VERSION} 5PKGNAME= go-${VERSION}
6CATEGORIES= lang 6CATEGORIES= lang
7MASTER_SITES= https://storage.googleapis.com/golang/ 7MASTER_SITES= https://storage.googleapis.com/golang/
8PATCH_SITES= https://codereview.appspot.com/download/ 8PATCH_SITES= https://codereview.appspot.com/download/
9 9
10MAINTAINER= bsiegert@NetBSD.org 10MAINTAINER= bsiegert@NetBSD.org
11HOMEPAGE= http://golang.org/ 11HOMEPAGE= http://golang.org/
12COMMENT= The Go programming language 12COMMENT= The Go programming language
13LICENSE= modified-bsd 13LICENSE= modified-bsd
14 14
15WRKSRC= ${WRKDIR}/go 15WRKSRC= ${WRKDIR}/go
16USE_TOOLS+= bash:run perl:run pax 16USE_TOOLS+= bash:run perl:run pax
cvs diff -r1.11 -r1.12 pkgsrc/lang/go/Attic/PLIST (expand / switch to unified diff)

--- pkgsrc/lang/go/Attic/PLIST 2014/08/17 15:17:42 1.11
+++ pkgsrc/lang/go/Attic/PLIST 2014/09/26 13:54:28 1.12
@@ -1,14 +1,14 @@ @@ -1,14 +1,14 @@
1@comment $NetBSD: PLIST,v 1.11 2014/08/17 15:17:42 wiz Exp $ 1@comment $NetBSD: PLIST,v 1.12 2014/09/26 13:54:28 wiz Exp $
2bin/go 2bin/go
3bin/gofmt 3bin/gofmt
4go/AUTHORS 4go/AUTHORS
5go/CONTRIBUTORS 5go/CONTRIBUTORS
6go/LICENSE 6go/LICENSE
7go/PATENTS 7go/PATENTS
8go/README 8go/README
9go/VERSION 9go/VERSION
10go/api/README 10go/api/README
11go/api/except.txt 11go/api/except.txt
12go/api/go1.1.txt 12go/api/go1.1.txt
13go/api/go1.2.txt 13go/api/go1.2.txt
14go/api/go1.3.txt 14go/api/go1.3.txt
@@ -276,26 +276,27 @@ go/misc/cgo/test/issue6128.go @@ -276,26 +276,27 @@ go/misc/cgo/test/issue6128.go
276go/misc/cgo/test/issue6390.go 276go/misc/cgo/test/issue6390.go
277go/misc/cgo/test/issue6472.go 277go/misc/cgo/test/issue6472.go
278go/misc/cgo/test/issue6506.go 278go/misc/cgo/test/issue6506.go
279go/misc/cgo/test/issue6612.go 279go/misc/cgo/test/issue6612.go
280go/misc/cgo/test/issue6833.go 280go/misc/cgo/test/issue6833.go
281go/misc/cgo/test/issue6833_c.c 281go/misc/cgo/test/issue6833_c.c
282go/misc/cgo/test/issue6997_linux.c 282go/misc/cgo/test/issue6997_linux.c
283go/misc/cgo/test/issue6997_linux.go 283go/misc/cgo/test/issue6997_linux.go
284go/misc/cgo/test/issue7234_test.go 284go/misc/cgo/test/issue7234_test.go
285go/misc/cgo/test/issue7560.go 285go/misc/cgo/test/issue7560.go
286go/misc/cgo/test/issue7665.go 286go/misc/cgo/test/issue7665.go
287go/misc/cgo/test/issue7695_test.go 287go/misc/cgo/test/issue7695_test.go
288go/misc/cgo/test/issue7786.go 288go/misc/cgo/test/issue7786.go
 289go/misc/cgo/test/issue7978.go
289go/misc/cgo/test/issue8148.go 290go/misc/cgo/test/issue8148.go
290go/misc/cgo/test/issue8331.h 291go/misc/cgo/test/issue8331.h
291go/misc/cgo/test/issue8331a.go 292go/misc/cgo/test/issue8331a.go
292go/misc/cgo/test/issue8331b.go 293go/misc/cgo/test/issue8331b.go
293go/misc/cgo/test/issue8441.go 294go/misc/cgo/test/issue8441.go
294go/misc/cgo/test/setgid_linux.go 295go/misc/cgo/test/setgid_linux.go
295go/misc/cgo/test/sleep_windows_386.go 296go/misc/cgo/test/sleep_windows_386.go
296go/misc/cgo/testasan/main.go 297go/misc/cgo/testasan/main.go
297go/misc/cgo/testcdefs/cdefstest.c 298go/misc/cgo/testcdefs/cdefstest.c
298go/misc/cgo/testcdefs/cdefstest.go 299go/misc/cgo/testcdefs/cdefstest.go
299go/misc/cgo/testcdefs/main.c 300go/misc/cgo/testcdefs/main.c
300go/misc/cgo/testcdefs/main.go 301go/misc/cgo/testcdefs/main.go
301go/misc/cgo/testcdefs/test.bash 302go/misc/cgo/testcdefs/test.bash
@@ -1340,31 +1341,33 @@ go/src/pkg/crypto/tls/testdata/Server-SS @@ -1340,31 +1341,33 @@ go/src/pkg/crypto/tls/testdata/Server-SS
1340go/src/pkg/crypto/tls/testdata/Server-SSLv3-RSA-RC4 1341go/src/pkg/crypto/tls/testdata/Server-SSLv3-RSA-RC4
1341go/src/pkg/crypto/tls/testdata/Server-TLSv10-ECDHE-ECDSA-AES 1342go/src/pkg/crypto/tls/testdata/Server-TLSv10-ECDHE-ECDSA-AES
1342go/src/pkg/crypto/tls/testdata/Server-TLSv10-RSA-3DES 1343go/src/pkg/crypto/tls/testdata/Server-TLSv10-RSA-3DES
1343go/src/pkg/crypto/tls/testdata/Server-TLSv10-RSA-AES 1344go/src/pkg/crypto/tls/testdata/Server-TLSv10-RSA-AES
1344go/src/pkg/crypto/tls/testdata/Server-TLSv10-RSA-RC4 1345go/src/pkg/crypto/tls/testdata/Server-TLSv10-RSA-RC4
1345go/src/pkg/crypto/tls/testdata/Server-TLSv11-RSA-RC4 1346go/src/pkg/crypto/tls/testdata/Server-TLSv11-RSA-RC4
1346go/src/pkg/crypto/tls/testdata/Server-TLSv12-CipherSuiteCertPreferenceECDSA 1347go/src/pkg/crypto/tls/testdata/Server-TLSv12-CipherSuiteCertPreferenceECDSA
1347go/src/pkg/crypto/tls/testdata/Server-TLSv12-CipherSuiteCertPreferenceRSA 1348go/src/pkg/crypto/tls/testdata/Server-TLSv12-CipherSuiteCertPreferenceRSA
1348go/src/pkg/crypto/tls/testdata/Server-TLSv12-ClientAuthRequestedAndECDSAGiven 1349go/src/pkg/crypto/tls/testdata/Server-TLSv12-ClientAuthRequestedAndECDSAGiven
1349go/src/pkg/crypto/tls/testdata/Server-TLSv12-ClientAuthRequestedAndGiven 1350go/src/pkg/crypto/tls/testdata/Server-TLSv12-ClientAuthRequestedAndGiven
1350go/src/pkg/crypto/tls/testdata/Server-TLSv12-ClientAuthRequestedNotGiven 1351go/src/pkg/crypto/tls/testdata/Server-TLSv12-ClientAuthRequestedNotGiven
1351go/src/pkg/crypto/tls/testdata/Server-TLSv12-ECDHE-ECDSA-AES 1352go/src/pkg/crypto/tls/testdata/Server-TLSv12-ECDHE-ECDSA-AES
1352go/src/pkg/crypto/tls/testdata/Server-TLSv12-IssueTicket 1353go/src/pkg/crypto/tls/testdata/Server-TLSv12-IssueTicket
 1354go/src/pkg/crypto/tls/testdata/Server-TLSv12-IssueTicketPreDisable
1353go/src/pkg/crypto/tls/testdata/Server-TLSv12-RSA-3DES 1355go/src/pkg/crypto/tls/testdata/Server-TLSv12-RSA-3DES
1354go/src/pkg/crypto/tls/testdata/Server-TLSv12-RSA-AES 1356go/src/pkg/crypto/tls/testdata/Server-TLSv12-RSA-AES
1355go/src/pkg/crypto/tls/testdata/Server-TLSv12-RSA-AES-GCM 1357go/src/pkg/crypto/tls/testdata/Server-TLSv12-RSA-AES-GCM
1356go/src/pkg/crypto/tls/testdata/Server-TLSv12-RSA-RC4 1358go/src/pkg/crypto/tls/testdata/Server-TLSv12-RSA-RC4
1357go/src/pkg/crypto/tls/testdata/Server-TLSv12-Resume 1359go/src/pkg/crypto/tls/testdata/Server-TLSv12-Resume
 1360go/src/pkg/crypto/tls/testdata/Server-TLSv12-ResumeDisabled
1358go/src/pkg/crypto/tls/testdata/Server-TLSv12-SNI 1361go/src/pkg/crypto/tls/testdata/Server-TLSv12-SNI
1359go/src/pkg/crypto/tls/ticket.go 1362go/src/pkg/crypto/tls/ticket.go
1360go/src/pkg/crypto/tls/tls.go 1363go/src/pkg/crypto/tls/tls.go
1361go/src/pkg/crypto/tls/tls_test.go 1364go/src/pkg/crypto/tls/tls_test.go
1362go/src/pkg/crypto/x509/cert_pool.go 1365go/src/pkg/crypto/x509/cert_pool.go
1363go/src/pkg/crypto/x509/example_test.go 1366go/src/pkg/crypto/x509/example_test.go
1364go/src/pkg/crypto/x509/pem_decrypt.go 1367go/src/pkg/crypto/x509/pem_decrypt.go
1365go/src/pkg/crypto/x509/pem_decrypt_test.go 1368go/src/pkg/crypto/x509/pem_decrypt_test.go
1366go/src/pkg/crypto/x509/pkcs1.go 1369go/src/pkg/crypto/x509/pkcs1.go
1367go/src/pkg/crypto/x509/pkcs8.go 1370go/src/pkg/crypto/x509/pkcs8.go
1368go/src/pkg/crypto/x509/pkcs8_test.go 1371go/src/pkg/crypto/x509/pkcs8_test.go
1369go/src/pkg/crypto/x509/pkix/pkix.go 1372go/src/pkg/crypto/x509/pkix/pkix.go
1370go/src/pkg/crypto/x509/root.go 1373go/src/pkg/crypto/x509/root.go
cvs diff -r1.12 -r1.13 pkgsrc/lang/go/Attic/distinfo (expand / switch to unified diff)

--- pkgsrc/lang/go/Attic/distinfo 2014/08/17 15:17:42 1.12
+++ pkgsrc/lang/go/Attic/distinfo 2014/09/26 13:54:28 1.13
@@ -1,6 +1,6 @@ @@ -1,6 +1,6 @@
1$NetBSD: distinfo,v 1.12 2014/08/17 15:17:42 wiz Exp $ 1$NetBSD: distinfo,v 1.13 2014/09/26 13:54:28 wiz Exp $
2 2
3SHA1 (go1.3.1.src.tar.gz) = bc296c9c305bacfbd7bff9e1b54f6f66ae421e6e 3SHA1 (go1.3.2.src.tar.gz) = 67d3a692588c259f9fe9dca5b80109e5b99271df
4RMD160 (go1.3.1.src.tar.gz) = f5b15f441075f3541ee4bacebf55c88ccdb7ed8c 4RMD160 (go1.3.2.src.tar.gz) = d81642869b9f044f98f8386ee936a5872763c4cf
5Size (go1.3.1.src.tar.gz) = 10047964 bytes 5Size (go1.3.2.src.tar.gz) = 10049331 bytes
6SHA1 (patch-src_cmd_go_build.go) = 1ac7a9d77e8061b0f1184ebe59c7600f61da61e2 6SHA1 (patch-src_cmd_go_build.go) = 1ac7a9d77e8061b0f1184ebe59c7600f61da61e2