Subject: CVS commit: pkgsrc/lang
From: Benny Siegert
Date: 2021-08-11 21:00:24
Message id: 20210811190024.C0679FA97@cvs.NetBSD.org

Log Message:
go116: update to 1.16.7.

This minor release includes a security fix according to the new security
policy.

A net/http/httputil ReverseProxy can panic due to a race condition if its
Handler aborts with ErrAbortHandler, for example due to an error in copying the
response body. An attacker might be able to force the conditions leading to the
race condition.

This is issue https://golang.org/issue/46866 and CVE-2021-36221. Thanks to
Andrew Crump (VMware) for reporting this issue.

Files:
RevisionActionfile
1.124modifypkgsrc/lang/go/version.mk
1.8modifypkgsrc/lang/go116/PLIST
1.10modifypkgsrc/lang/go116/distinfo