Next | Query returned 330 messages, browsing 271 to 280 | Previous

History of commit frequency

CVS Commit History:


   2016-04-08 22:00:02 by Benny Siegert | Files touched by this commit (3)
Log message:
Patch CVE-2016-3959 in Go. There will be a Go 1.6.1 release next week that
fixes this properly.
   2016-03-09 08:23:06 by Tobias Nygren | Files touched by this commit (1)
Log message:
Add Linux specific PLIST
   2016-02-23 21:12:25 by Benny Siegert | Files touched by this commit (4)
Log message:
Update Go to 1.6.

The latest Go release, version 1.6, arrives six months after 1.5. Most of its
changes are in the implementation of the language, runtime, and libraries.
There are no changes to the language specification. As always, the release
maintains the Go 1 promise of compatibility. We expect almost all Go programs
to continue to compile and run as before.

The release adds new ports to Linux on 64-bit MIPS and Android on 32-bit x86;
defined and enforced rules for sharing Go pointers with C; transparent,
automatic support for HTTP/2; and a new mechanism for template reuse.

Full changelog at https://golang.org/doc/go1.6.
   2016-01-31 11:17:27 by Benny Siegert | Files touched by this commit (3)
Log message:
Add the correct path for SSL certificates that mozilla-rootcerts uses.
PR pkg/50690.
   2016-01-23 13:42:57 by Roland Illig | Files touched by this commit (1)
Log message:
Made Go packages testable and cleaned up shell commands

Prevented the error message "*** Error 1 (ignored) ***" during installation
by using || instead of &&.

Shell commands are hidden during normal operation.

Go packages can be tested using "bmake test".

ok @bsiegert
   2016-01-16 10:43:44 by Filip Hajny | Files touched by this commit (5)
Log message:
Update lang/go to 1.5.3.

This is a security-related release, it fixes CVE-2015-8618 that was
partically patched in 1.5.2nb1.

See full release notes for a description:

https://groups.google.com/d/msg/golang-announce/MEATuOi_ei4/JsndUuZwEAAJ
   2015-12-29 22:47:48 by Benny Siegert | Files touched by this commit (7)
Log message:
Real buildlink support for Go, hacked with wiz@.

Go packages now define a set of files to buildlink in their buildlink3.mk.
go-packages.mk no longer looks in ${PREFIX}/gopkg during the build. This
should also fix the spurious issues with rebuilds of .a files during bulk
builds of Go packages.
   2015-12-27 20:41:10 by Thomas Klausner | Files touched by this commit (1)
Log message:
Document variables this mk file provides.
Ok bsiegert@
   2015-12-22 21:44:40 by Benny Siegert | Files touched by this commit (5)
Log message:
Pull in https://golang.org/cl/17672, "math/big: fix carry propagation in
Int.Exp Montgomery code", to fix CVE-2015-8618.

From the oss-security posting that asked for a CVE:

"The Go open source project has received notification of an error in the
math/big library (https://golang.org/pkg/math/big/). The problem that was
identified is similar to CVE-2015-3193
<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3193>. The
vulnerability was introduced in the 1.5 release, and remains present in Go
1.5.1 and 1.5.2.

"A fix for the issue has been applied to the master branch of the Go repo
under CL 17672 <https://go-review.googlesource.com/#/c/17672/>. We will
also be releasing Go 1.5.3 to fix this vulnerability."

ok wiz@
   2015-12-10 21:04:54 by Benny Siegert | Files touched by this commit (6)
Log message:
Update Go to 1.5.2, original patch from Kamel Derouiche in PR pkg/50498.

go1.5.2 (released 2015/12/02) includes bug fixes to the compiler,
linker, and the mime/multipart, net, and runtime packages. See the Go
1.5.2 milestone on our issue tracker for details.

https://github.com/golang/go/issues?q=milestone%3AGo1.5.2

Next | Query returned 330 messages, browsing 271 to 280 | Previous