./lang/go123, The Go programming language

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]

Branch: CURRENT, Version: 1.23.5nb1, Package name: go123-1.23.5nb1, Maintainer: bsiegert

The Go programming language is an open source project to make
programmers more productive.

Go is expressive, concise, clean, and efficient. Its concurrency
mechanisms make it easy to write programs that get the most out of
multicore and networked machines, while its novel type system enables
flexible and modular program construction. Go compiles quickly to
machine code yet has the convenience of garbage collection and the power
of run-time reflection. It's a fast, statically typed, compiled language
that feels like a dynamically typed, interpreted language.

Master sites:

Filesize: 27518.568 KB

Version history: (Expand)

CVS history: (Expand)


   2025-01-17 11:33:09 by Benny Siegert | Files touched by this commit (4) 
Log message:
Update go122 to 1.22.11 and go123 to 1.23.5.

These minor releases include 2 security fixes following the security policy:

- crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints

  A certificate with a URI which has a IPv6 address with a zone ID may
  incorrectly satisfy a URI name constraint that applies to the certificate
  chain.

  Certificates containing URIs are not permitted in the web PKI, so this
  only affects users of private PKIs which make use of URIs.

  Thanks to Juho Forsén of Mattermost for reporting this issue.

  This is CVE-2024-45341 and Go issue https://go.dev/issue/71156.

- net/http: sensitive headers incorrectly sent after cross-domain redirect

  The HTTP client drops sensitive headers after following a cross-domain
  redirect.  For example, a request to a.com/ containing an
  Authorization header which is redirected to b.com/ will not send that
  header to b.com.

  In the event that the client received a subsequent same-domain
  redirect, however, the sensitive headers would be restored. For
  example, a chain of redirects from a.com/, to b.com/1, and finally to
  b.com/2 would incorrectly send the Authorization header to b.com/2.

  Thanks to Kyle Seely for reporting this issue.

  This is CVE-2024-45336 and Go issue https://go.dev/issue/70530.
   2025-01-02 20:53:12 by Benny Siegert | Files touched by this commit (3) 
Log message:
go123: stop requiring /proc on NetBSD

This adds a patch (taken from Go 1.24 development) to use a sysctl
instead of /proc to find the path of the executable, and thus the
files for the standard library.

Earlier versions of Go (including 1.22) had the directory where the
standard library is installed baked in to the binaries as
GOROOT_FINAL. In the interest of portability, this is now determined
at runtime. In NetBSD, this used to use /proc/self/exe, however many
build sandboxes do not have /proc mounted.

With this change, /proc is no longer required for building Go code.
   2024-12-04 19:51:39 by Benny Siegert | Files touched by this commit (4) 
Log message:
Update Go to 1.22.10, 1.23.4

go1.23.4 (released 2024-12-03) includes fixes to the compiler, the runtime, the
trace command, and the syscall package. See the Go 1.23.4 milestone on our
issue tracker for details.

go1.22.10 (released 2024-12-03) includes fixes to the runtime and the syscall
package. See the Go 1.22.10 milestone on our issue tracker for details.
   2024-11-22 11:50:38 by Thomas Klausner | Files touched by this commit (1) 
Log message:
go123: remove traces of GOROOT_FINAL

(didn't help after all, removed in 1.23)
   2024-11-22 08:49:50 by Thomas Klausner | Files touched by this commit (1) 
Log message:
go123: set GOROOT_FINAL

Fixes binary for me on NetBSD 10.
   2024-11-22 08:35:27 by Thomas Klausner | Files touched by this commit (1) 
Log message:
go123: remove reference to non-existent files
   2024-11-08 20:46:59 by Benny Siegert | Files touched by this commit (5) | Package updated
Log message:
go: update to 1.22.9 and 1.23.2.

go1.23.3 (released 2024-11-06) includes fixes to the linker, the runtime, and
the net/http, os, and syscall packages. See the Go 1.23.3 milestone on our
issue tracker for details.

go1.22.9 (released 2024-11-06) includes fixes to the linker. See the Go 1.22.9
milestone on our issue tracker for details.
   2024-10-03 17:41:01 by Benny Siegert | Files touched by this commit (6) | Package updated
Log message:
go: update go123 to 1.23.2 and go122 to 1.22.8.

go1.23.2 (released 2024-10-01) includes fixes to the compiler, cgo, the
runtime, and the maps, os, os/exec, time, and unique packages. See the Go
1.23.2 milestone on our issue tracker for details.

go1.22.8 (released 2024-10-01) includes fixes to cgo, and the maps and syscall
packages. See the Go 1.22.8 milestone on our issue tracker for details.