kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
pkgsrc/lang/go/version.mk

69 lines
1.8 KiB
Makefile
Raw Normal View History

Update go117 to 1.17.5. go1.17.4 (released 2021-12-02) includes fixes to the compiler, linker, runtime, and the go/types, net/http, and time packages. See the Go 1.17.4 milestone on our issue tracker for details. go1.17.5 (released 2021-12-09) includes security fixes to the syscall and net/http packages. See the Go 1.17.5 milestone on our issue tracker for details. When a Go program running on a Unix system is out of file descriptors and calls syscall.ForkExec (including indirectly by using the os/exec package), syscall.ForkExec can close file descriptor 0 as it fails. If this happens (or can be provoked) repeatedly, it can result in misdirected I/O such as writing network traffic intended for one connection to a different connection, or content intended for one file to a different one. This is CVE-2021-44717 and is fixed in Go 1.17.5 and Go 1.16.12. An attacker can cause unbounded memory growth in a Go server accepting HTTP/2 requests. This is CVE-2021-44716 and is fixed in Go 1.17.5 and Go 1.16.12.
2021-12-09 18:25:56 +01:00
# $NetBSD: version.mk,v 1.137 2021/12/09 17:25:56 bsiegert Exp $
go*: Disable SSP support completely. It's not supported by the go linker, and can cause issues when building third-party modules if the SSP libraries are handled by pkgsrc.
2018-01-30 18:05:21 +01:00
go: Split *_SUPPORTED variables out into new go-vars.mk. It's not always possible to include go-package.mk earlier than bsd.prefs.mk in a package, for example if the package defines its own do-install target, so move out the *_SUPPORTED variables that need to be included first.
2019-12-09 10:59:31 +01:00
#
# If bsd.prefs.mk is included before go-package.mk in a package, then this
# file must be included directly in the package prior to bsd.prefs.mk.
#
.include "go-vars.mk"
Add a separate Makefile for the version string plus GOARCH. To be used by Go packages.
2014-11-18 21:39:11 +01:00
Update go117 to 1.17.5. go1.17.4 (released 2021-12-02) includes fixes to the compiler, linker, runtime, and the go/types, net/http, and time packages. See the Go 1.17.4 milestone on our issue tracker for details. go1.17.5 (released 2021-12-09) includes security fixes to the syscall and net/http packages. See the Go 1.17.5 milestone on our issue tracker for details. When a Go program running on a Unix system is out of file descriptors and calls syscall.ForkExec (including indirectly by using the os/exec package), syscall.ForkExec can close file descriptor 0 as it fails. If this happens (or can be provoked) repeatedly, it can result in misdirected I/O such as writing network traffic intended for one connection to a different connection, or content intended for one file to a different one. This is CVE-2021-44717 and is fixed in Go 1.17.5 and Go 1.16.12. An attacker can cause unbounded memory growth in a Go server accepting HTTP/2 requests. This is CVE-2021-44716 and is fixed in Go 1.17.5 and Go 1.16.12.
2021-12-09 18:25:56 +01:00
GO117_VERSION= 1.17.5
Update go116 to 1.16.12. go1.16.12 (released 2021-12-09) includes security fixes to the syscall and net/http packages. See the Go 1.16.12 milestone on our issue tracker for details. When a Go program running on a Unix system is out of file descriptors and calls syscall.ForkExec (including indirectly by using the os/exec package), syscall.ForkExec can close file descriptor 0 as it fails. If this happens (or can be provoked) repeatedly, it can result in misdirected I/O such as writing network traffic intended for one connection to a different connection, or content intended for one file to a different one. This is CVE-2021-44717 and is fixed in Go 1.17.5 and Go 1.16.12. An attacker can cause unbounded memory growth in a Go server accepting HTTP/2 requests. This is CVE-2021-44716 and is fixed in Go 1.17.5 and Go 1.16.12.
2021-12-09 18:13:49 +01:00
GO116_VERSION= 1.16.12
Update go110 to 1.10.8 (security). This release addresses a recently supported security issue. This DoS vulnerability in the crypto/elliptic implementations of the P-521 and P-384 elliptic curves may let an attacker craft inputs that consume excessive amounts of CPU. These inputs might be delivered via TLS handshakes, X.509 certificates, JWT tokens, ECDH shares or ECDSA signatures. In some cases, if an ECDH private key is reused more than once, the attack can also lead to key recovery. The issue is CVE-2019-6486 and Go issue golang.org/issue/29903. See the Go issue for more details.
2019-01-24 10:33:08 +01:00
GO110_VERSION= 1.10.8
Update go19 to 1.9.7, latest on that branch. go1.9.5 (released 2018/03/28) includes fixes to the compiler, go command, and net/http/pprof package. See the Go 1.9.5 milestone on our issue tracker for details. go1.9.6 (released 2018/05/01) includes fixes to the compiler and go command. See the Go 1.9.6 milestone on our issue tracker for details. go1.9.7 (released 2018/06/05) includes fixes to the go command, and the crypto/x509, and strings packages. In particular, it adds minimal support to the go command for the vgo transition. See the Go 1.9.7 milestone on our issue tracker for details.
2018-07-08 20:40:40 +02:00
GO19_VERSION= 1.9.7
Update go14 to 1.4.3. It fixes four security-related issues. The issues were reported in Go's net/http package. They affect programs using that package to proxy HTTP requests. We recommend that all users upgrade to Go 1.5, which fixes these issues. For users unable to upgrade to Go 1.5, we have released version 1.4.3, which is based on Go 1.4.2 plus fixes for these issues. Affected Go programs—those that use the net/http package as a proxy server—must be recompiled with Go 1.5 or Go 1.4.3 to receive the fixes. The CVE issue descriptions and fixes are linked below. CVE-2015-5739 "Content Length" treated as valid header: https://go-review.googlesource.com/#/c/11772/ CVE-2015-5740 Double content-length headers does not return 400 error: https://go-review.googlesource.com/#/c/11810/ CVE-2015-5741 Additional hardening, not sending Content-Length w/Transfer-Encoding, Closing connections: https://go-review.googlesource.com/#/c/11810/ https://go-review.googlesource.com/#/c/12865/ https://go-review.googlesource.com/#/c/13148/ The Go team would like to thank Jed Denlea and Régis Leroy for their contributions to this release. They have been awarded 1337 USD under the Google Security Bounty program.
2015-09-26 19:37:01 +02:00
GO14_VERSION= 1.4.3
Add a separate Makefile for the version string plus GOARCH. To be used by Go packages.
2014-11-18 21:39:11 +01:00
go: Split *_SUPPORTED variables out into new go-vars.mk. It's not always possible to include go-package.mk earlier than bsd.prefs.mk in a package, for example if the package defines its own do-install target, so move out the *_SUPPORTED variables that need to be included first.
2019-12-09 10:59:31 +01:00
.include "../../mk/bsd.prefs.mk"
go: Use OPSYS_VERSION.
2021-11-29 17:29:34 +01:00
.if ${OPSYS} == "NetBSD" && ${OPSYS_VERSION} < 070000
Move most of the version selection logic into version.mk. Provide a new variable, GO_PACKAGE_DEP, with the correct dependency on the user-selected Go version, to be used for fixing syncthing and friends.
2018-09-22 21:44:21 +02:00
# 1.9 is the last Go version to support NetBSD 6
GO_VERSION_DEFAULT?= 19
go: Use OPSYS_VERSION.
2021-11-29 17:29:34 +01:00
.elif ${OPSYS} == "Darwin" && ${OPSYS_VERSION} < 101000
lang/go: on osx 10.9 and earlier, use go110 go 1.11 removed support for osx 10.8 and 10.9 https://github.com/golang/go/issues/23122
2019-09-17 06:39:20 +02:00
# go 1.11 removed support for osx 10.8 and 10.9
# https://github.com/golang/go/issues/23122
# darwin version 13.4 is osx 10.9.5
GO_VERSION_DEFAULT?= 110
Move most of the version selection logic into version.mk. Provide a new variable, GO_PACKAGE_DEP, with the correct dependency on the user-selected Go version, to be used for fixing syncthing and friends.
2018-09-22 21:44:21 +02:00
.else
Make go 1.17 the default. I ran a bulk build and found three packages that broke. Two are fixed. I don't know how to fix net/amazon-ecs-cli, but it did not build for me on Go 1.16 either, so it is not a direct regression.
2021-09-04 17:46:42 +02:00
GO_VERSION_DEFAULT?= 117
Move most of the version selection logic into version.mk. Provide a new variable, GO_PACKAGE_DEP, with the correct dependency on the user-selected Go version, to be used for fixing syncthing and friends.
2018-09-22 21:44:21 +02:00
.endif
.if !empty(GO_VERSION_DEFAULT)
GOVERSSUFFIX= ${GO_VERSION_DEFAULT}
.endif
Move definition of $GO to version.mk. We have some packages, like mongodb-tools, that cannot include go-package.mk but need to call the go tool.
2018-07-08 15:53:42 +02:00
# How to find the Go tool
GO= ${PREFIX}/go${GOVERSSUFFIX}/bin/go
Move most of the version selection logic into version.mk. Provide a new variable, GO_PACKAGE_DEP, with the correct dependency on the user-selected Go version, to be used for fixing syncthing and friends.
2018-09-22 21:44:21 +02:00
# Build dependency for Go
GO_PACKAGE_DEP= go${GOVERSSUFFIX}-${GO${GOVERSSUFFIX}_VERSION}*:../../lang/go${GOVERSSUFFIX}
go/version.mk: now supports aarch64
2020-05-01 18:39:59 +02:00
ONLY_FOR_PLATFORM= *-*-i386 *-*-x86_64 *-*-earmv[67]hf *-*-aarch64
Add a separate Makefile for the version string plus GOARCH. To be used by Go packages.
2014-11-18 21:39:11 +01:00
NOT_FOR_PLATFORM= SunOS-*-i386
.if ${MACHINE_ARCH} == "i386"
lang: align variable assignments pkglint -Wall -F --only aligned --only indent -r No manual corrections.
2019-11-03 20:03:56 +01:00
GOARCH= 386
GOCHAR= 8
Add a separate Makefile for the version string plus GOARCH. To be used by Go packages.
2014-11-18 21:39:11 +01:00
.elif ${MACHINE_ARCH} == "x86_64"
lang: align variable assignments pkglint -Wall -F --only aligned --only indent -r No manual corrections.
2019-11-03 20:03:56 +01:00
GOARCH= amd64
GOCHAR= 6
Add Yasushi Oshima patches for arm from: https://github.com/oshimaya/pkgsrc/tree/master/lang/go
2018-01-20 17:55:05 +01:00
.elif ${MACHINE_ARCH} == "earmv6hf" || ${MACHINE_ARCH} == "earmv7hf"
lang: align variable assignments pkglint -Wall -F --only aligned --only indent -r No manual corrections.
2019-11-03 20:03:56 +01:00
GOARCH= arm
GOCHAR= 5
go/version.mk: now supports aarch64
2020-05-01 18:39:59 +02:00
.elif ${MACHINE_ARCH} == "aarch64"
GOARCH= arm64
GOOPT= GOARM=7
# GOHOSTARCH is being misdetected as arm on NetBSD. Unclear why.
GOOPT+= GOHOSTARCH=arm64
Add a separate Makefile for the version string plus GOARCH. To be used by Go packages.
2014-11-18 21:39:11 +01:00
.endif
Add Yasushi Oshima patches for arm from: https://github.com/oshimaya/pkgsrc/tree/master/lang/go
2018-01-20 17:55:05 +01:00
.if ${MACHINE_ARCH} == "earmv6hf"
lang: align variable assignments pkglint -Wall -F --only aligned --only indent -r No manual corrections.
2019-11-03 20:03:56 +01:00
GOOPT= GOARM=6
Add Yasushi Oshima patches for arm from: https://github.com/oshimaya/pkgsrc/tree/master/lang/go
2018-01-20 17:55:05 +01:00
.elif ${MACHINE_ARCH} == "earmv7hf"
lang: align variable assignments pkglint -Wall -F --only aligned --only indent -r No manual corrections.
2019-11-03 20:03:56 +01:00
GOOPT= GOARM=7
Add Yasushi Oshima patches for arm from: https://github.com/oshimaya/pkgsrc/tree/master/lang/go
2018-01-20 17:55:05 +01:00
.endif
lang: align variable assignments pkglint -Wall -F --only aligned --only indent -r No manual corrections.
2019-11-03 20:03:56 +01:00
GO_PLATFORM= ${LOWER_OPSYS}_${GOARCH}
PLIST_SUBST+= GO_PLATFORM=${GO_PLATFORM:Q} GOARCH=${GOARCH:Q}
PLIST_SUBST+= GOCHAR=${GOCHAR:Q}
go: Improve PRINT_PLIST_AWK patterns and avoid possible double definition - Move GO_PLATFORM definition in lang/go/version.mk in order that also lang/go* packages can (re)use it - Change PRINT_PLIST_AWK pattern that replace all ${GO_PLATFORM} and apply it only when ${GO_PLATFORM} is a directory (between two "/"). There are only 3 exceptions to that in lang/go14. Move it to version.mk so lang/go* PLIST can be mostly automatically generated. These changes should help to avoid (most) manual editing of lang/go*/PLIST. Discussed with and thanks to <bsiegert>!
2018-10-26 15:49:23 +02:00
PRINT_PLIST_AWK+= { sub("/${GO_PLATFORM}/", "/$${GO_PLATFORM}/") }
lang/go: add go to the tools directory This makes it easier to run the Go compiler from within the build environment created by "bmake build-env".
2019-12-07 19:15:13 +01:00
TOOLS_CREATE+= go
TOOLS_PATH.go= ${GO}
Reference in a new issue Copy permalink