kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
pkgsrc/security/go-crypto/buildlink3.mk

18 lines
476 B
Makefile
Raw Normal View History

Update go-crypto to 0.0.20200122. In addition to about two years of changes, this contains notably the following security fix: When int is 32 bits wide (on 32-bit architectures like 386 and arm), an overflow could occur, causing a panic, due to malformed ASN.1 being passed to any of the ASN1 methods of String. Tested on linux/386 and darwin/amd64. This fixes CVE-2020-7919 and was found thanks to the Project Wycheproof test vectors. pkgsrc changes: Once again, the acme subdirectory was removed as it introduces a circular dependency with go-net. Prodded several times by ng0@
2020-02-03 14:14:20 +01:00
# $NetBSD: buildlink3.mk,v 1.6 2020/02/03 13:14:20 bsiegert Exp $
Add buildlink3.mk file for go-crypto.
2015-12-29 22:56:01 +01:00
BUILDLINK_TREE+= go-crypto
.if !defined(GO_CRYPTO_BUILDLINK3_MK)
GO_CRYPTO_BUILDLINK3_MK:=
BUILDLINK_CONTENTS_FILTER.go-crypto= ${EGREP} gopkg/
BUILDLINK_DEPMETHOD.go-crypto?= build
Update go-crypto to 0.0.20200122. In addition to about two years of changes, this contains notably the following security fix: When int is 32 bits wide (on 32-bit architectures like 386 and arm), an overflow could occur, causing a panic, due to malformed ASN.1 being passed to any of the ASN1 methods of String. Tested on linux/386 and darwin/amd64. This fixes CVE-2020-7919 and was found thanks to the Project Wycheproof test vectors. pkgsrc changes: Once again, the acme subdirectory was removed as it introduces a circular dependency with go-net. Prodded several times by ng0@
2020-02-03 14:14:20 +01:00
BUILDLINK_API_DEPENDS.go-crypto+= go-crypto>=0.0.20200122
Fix indentation in buildlink3.mk files. The actual fix as been done by "pkglint -F */*/buildlink3.mk", and was reviewed manually. There are some .include lines that still are indented with zero spaces although the surrounding .if is indented. This is existing practice.
2018-01-07 14:03:53 +01:00
BUILDLINK_PKGSRCDIR.go-crypto?= ../../security/go-crypto
Update go-crypto to 20170317, part of PR pkg/52081. No changelog from upstream but there is a new acme package for Let's Encrypt certificates.
2017-03-16 20:27:36 +01:00
Update go-crypto to 0.0.20180308. No changelog from upstream. The circular dependency that prompted splitting this package is no longer an issue, as acme now depends on context instead of golang.org/x/net/context. Thus, this package now contains what used to be go-crypto-acme and conflicts with it.
2018-03-11 21:43:33 +01:00
.include "../../devel/go-sys/buildlink3.mk"
Add buildlink3.mk file for go-crypto.
2015-12-29 22:56:01 +01:00
.endif # GO_CRYPTO_BUILDLINK3_MK
BUILDLINK_TREE+= -go-crypto
Reference in a new issue Copy permalink