![[BACK]](/icons/back.gif){kind=icon}
Up to [cvs.NetBSD.org] / pkgsrc / lang / go112
Request diff between arbitrary revisions
Default branch: MAIN
Revision 1.9, Sat Mar 21 10:06:53 2020 UTC (3 years, 6 months ago) by bsiegert
Branch: MAIN
CVS Tags: HEAD
Changes since 1.8: +1 -1
lines
FILE REMOVED
We say goodbye to go112. The supported Go versions are 1.13 and 1.14. For various reasons, we need to keep 1.4, 1.9 and 1.10 around. But nothing should depend on go112.
Revision 1.8 / (download) - annotate - [select for diffs], Sun Feb 23 19:21:27 2020 UTC (3 years, 7 months ago) by bsiegert
Branch: MAIN
Changes since 1.7: +1 -2
lines
Diff to previous 1.7 (colored)
Update go112 to 1.12.7. These releases include fixes to the runtime, the crypto/x509, and net/http packages.
Revision 1.7 / (download) - annotate - [select for diffs], Sun Jan 26 17:31:28 2020 UTC (3 years, 8 months ago) by rillig
Branch: MAIN
Changes since 1.6: +2 -2
lines
Diff to previous 1.6 (colored)
all: migrate homepages from http to https pkglint -r --network --only "migrate" As a side-effect of migrating the homepages, pkglint also fixed a few indentations in unrelated lines. These and the new homepages have been checked manually.
Revision 1.6 / (download) - annotate - [select for diffs], Wed Aug 14 15:42:52 2019 UTC (4 years, 1 month ago) by bsiegert
Branch: MAIN
CVS Tags: pkgsrc-2019Q4-base,
pkgsrc-2019Q4,
pkgsrc-2019Q3-base,
pkgsrc-2019Q3
Changes since 1.5: +1 -2
lines
Diff to previous 1.5 (colored)
go112: update to 1.12.8 (security release). net/http: Denial of Service vulnerabilities in the HTTP/2 implementation net/http and golang.org/x/net/http2 servers that accept direct connections from untrusted clients could be remotely made to allocate an unlimited amount of memory, until the program crashes. Servers will now close connections if the send queue accumulates too many control messages. The issues are CVE-2019-9512 and CVE-2019-9514, and Go issue golang.org/issue/33606. Thanks to Jonathan Looney from Netflix for discovering and reporting these issues. This is also fixed in version v0.0.0-20190813141303-74dc4d7220e7 of golang.org/x/net/http2. net/url: parsing validation issue url.Parse would accept URLs with malformed hosts, such that the Host field could have arbitrary suffixes that would appear in neither Hostname() nor Port(), allowing authorization bypasses in certain applications. Note that URLs with invalid, not numeric ports will now return an error from url.Parse. The issue is CVE-2019-14809 and Go issue golang.org/issue/29098. Thanks to Julian Hector and Nikolai Krein from Cure53, and Adi Cohen (adico.me) for discovering and reporting this issue.
Revision 1.5 / (download) - annotate - [select for diffs], Sun Aug 11 13:21:21 2019 UTC (4 years, 1 month ago) by wiz
Branch: MAIN
Changes since 1.4: +2 -1
lines
Diff to previous 1.4 (colored)
Bump PKGREVISIONs for perl 5.30.0
Revision 1.4 / (download) - annotate - [select for diffs], Mon May 27 15:16:38 2019 UTC (4 years, 4 months ago) by bsiegert
Branch: MAIN
CVS Tags: pkgsrc-2019Q2-base,
pkgsrc-2019Q2
Changes since 1.3: +2 -2
lines
Diff to previous 1.3 (colored)
Update go112 to 1.12.5. This release includes fixes to the compiler, the linker, the go command, the runtime, and the os package. Same as for go111, remove the pkg/bootstrap tree from the package.
Revision 1.3 / (download) - annotate - [select for diffs], Tue Apr 16 18:30:27 2019 UTC (4 years, 5 months ago) by bsiegert
Branch: MAIN
Changes since 1.2: +1 -2
lines
Diff to previous 1.2 (colored)
Update go112 to 1.12.4. go1.12.2 (released 2019/04/05) includes fixes to the compiler, the go command, the runtime, and the doc, net, net/http/httputil, and os packages. See the Go 1.12.2 milestone on our issue tracker for details. go1.12.3 (released 2019/04/08) was accidentally released without its intended fix. It is identical to go1.12.2, except for its version number. The intended fix is in go1.12.4. go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary releases on older versions of GNU/Linux led to failures when linking programs that used cgo. Only Linux users who hit this issue need to update.
Revision 1.2 / (download) - annotate - [select for diffs], Wed Mar 13 10:40:19 2019 UTC (4 years, 6 months ago) by bsiegert
Branch: MAIN
CVS Tags: pkgsrc-2019Q1-base,
pkgsrc-2019Q1
Changes since 1.1: +6 -2
lines
Diff to previous 1.1 (colored)
go112: paper over issues with filenames containing umlauts. - extract using gtar (hopefully more lenient than bsdtar) - remove the files in question in post-extract While here, re-add a PLIST.route conditional that was accidentally removed, breaking the build on Linux (PR pkg/54054).
Revision 1.1 / (download) - annotate - [select for diffs], Sat Mar 9 09:29:30 2019 UTC (4 years, 6 months ago) by bsiegert
Branch: MAIN
Add a package for Go 1.12. Some of the highlights include opt-in support for TLS 1.3, improved modules support (in preparation for being the default in Go 1.13), support for windows/arm, and improved macOS & iOS forwards compatibility. See https://blog.golang.org/go1.12. In pkgsrc, this is _not_ the default version for Go package builds just yet.