pkgsrc/lang/go117
bsiegert 211b84339d Update go117 to 1.17.8 (security).
This minor release includes a security fix following the security policy:

regexp: stack exhaustion compiling deeply nested expressions

On 64-bit platforms, an extremely deeply nested expression can cause
regexp.Compile to cause goroutine stack exhaustion, forcing the program to
exit. Note this applies to very large expressions, on the order of 2MB.

Thanks to Juho Nurminen of Mattermost for reporting this.

This is CVE-2022-24921 and https://go.dev/issue/51112.
2022-03-07 08:44:52 +00:00
..
patches go117: Rework illumos getgrouplist hack. 2021-09-14 10:12:16 +00:00
ALTERNATIVES
DESCR
distinfo Update go117 to 1.17.8 (security). 2022-03-07 08:44:52 +00:00
Makefile Update go117 to 1.17.6. 2022-01-09 19:54:46 +00:00
PLIST Update go117 to 1.17.8 (security). 2022-03-07 08:44:52 +00:00
PLIST.Darwin
PLIST.SunOS