The NetBSD Project

CVS log for pkgsrc/lang/go111/Makefile

[BACK] Up to [cvs.NetBSD.org] / pkgsrc / lang / go111

Request diff between arbitrary revisions


Default branch: MAIN


Revision 1.6 / (download) - annotate - [select for diffs], Wed Aug 14 15:17:41 2019 UTC (5 weeks, 1 day ago) by bsiegert
Branch: MAIN
CVS Tags: HEAD
Changes since 1.5: +1 -2 lines
Diff to previous 1.5 (colored) to selected 1.2 (colored)

go111: update to 1.11.13 (security release).

net/http: Denial of Service vulnerabilities in the HTTP/2 implementation

net/http and golang.org/x/net/http2 servers that accept direct connections from
untrusted clients could be remotely made to allocate an unlimited amount of
memory, until the program crashes. Servers will now close connections if the
send queue accumulates too many control messages.

The issues are CVE-2019-9512 and CVE-2019-9514, and Go issue golang.org/issue/33606.
Thanks to Jonathan Looney from Netflix for discovering and reporting these issues.

This is also fixed in version v0.0.0-20190813141303-74dc4d7220e7 of
golang.org/x/net/http2.

net/url: parsing validation issue

url.Parse would accept URLs with malformed hosts, such that the Host field
could have arbitrary suffixes that would appear in neither Hostname() nor
Port(), allowing authorization bypasses in certain applications. Note that URLs
with invalid, not numeric ports will now return an error from url.Parse.

The issue is CVE-2019-14809 and Go issue golang.org/issue/29098.
Thanks to Julian Hector and Nikolai Krein from Cure53, and Adi Cohen (adico.me)
for discovering and reporting this issue.

Revision 1.5 / (download) - annotate - [select for diffs], Sun Aug 11 13:21:21 2019 UTC (5 weeks, 4 days ago) by wiz
Branch: MAIN
Changes since 1.4: +2 -1 lines
Diff to previous 1.4 (colored) to selected 1.2 (colored)

Bump PKGREVISIONs for perl 5.30.0

Revision 1.4 / (download) - annotate - [select for diffs], Mon May 27 14:33:10 2019 UTC (3 months, 3 weeks ago) by bsiegert
Branch: MAIN
CVS Tags: pkgsrc-2019Q2-base, pkgsrc-2019Q2
Changes since 1.3: +2 -2 lines
Diff to previous 1.3 (colored) to selected 1.2 (colored)

Update go111 to 1.11.10.

This release includes fixes to the compiler, the linker, the go command, the
runtime, and the os package.

While here, remove pkg/bootstrap from the package, as it is only used
for bootstrapping.

Revision 1.3 / (download) - annotate - [select for diffs], Tue Oct 2 18:19:56 2018 UTC (11 months, 2 weeks ago) by bsiegert
Branch: MAIN
CVS Tags: pkgsrc-2019Q1-base, pkgsrc-2019Q1, pkgsrc-2018Q4-base, pkgsrc-2018Q4
Changes since 1.2: +2 -3 lines
Diff to previous 1.2 (colored)

Update go111 to 1.11.1.

go1.11.1 (released 2018/10/01) includes fixes to the compiler, documentation,
go command, runtime, and the crypto/x509, encoding/json, go/types, net,
net/http, and reflect packages. See the Go 1.11.1 milestone on our issue
tracker for details.

Also correct the PLIST and use ln -sf instead of ln -s.

Revision 1.2 / (download) - annotate - [selected], Sat Sep 22 12:15:28 2018 UTC (11 months, 3 weeks ago) by minskim
Branch: MAIN
CVS Tags: pkgsrc-2018Q3-base, pkgsrc-2018Q3
Changes since 1.1: +7 -1 lines
Diff to previous 1.1 (colored)

lang/go111: Fix ALTERNATIVES

- Install versioned commands in bin/
- Use ALTERNATIVES to create commands without version suffix

Revision 1.1 / (download) - annotate - [select for diffs], Tue Sep 18 16:22:14 2018 UTC (12 months ago) by bsiegert
Branch: MAIN
Diff to selected 1.2 (colored)

Add Go 1.11 as lang/go111.

This installs the go tool as go111; all the supporting files go under
$PREFIX/go111, so it does not conflict with other Go versions. Go packages
in pkgsrc do not use it to build yet.

Changes:

There are many changes and improvements to the toolchain, runtime, and
libraries, but two features stand out as being especially exciting: modules
and WebAssembly support.

This release adds preliminary support for a new concept called "modules," an
alternative to GOPATH with integrated support for versioning and package
distribution. Module support is considered experimental, and there are still
a few rough edges to smooth out, so please make liberal use of the issue
tracker.

Go 1.11 also adds an experimental port to WebAssembly (js/wasm). This allows
programmers to compile Go programs to a binary format compatible with four
major web browsers.

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.




CVSweb <webmaster@jp.NetBSD.org>