pkgsrc/lang/go
bsiegert 211b84339d Update go117 to 1.17.8 (security).
This minor release includes a security fix following the security policy:

regexp: stack exhaustion compiling deeply nested expressions

On 64-bit platforms, an extremely deeply nested expression can cause
regexp.Compile to cause goroutine stack exhaustion, forcing the program to
exit. Note this applies to very large expressions, on the order of 2MB.

Thanks to Juho Nurminen of Mattermost for reporting this.

This is CVE-2022-24921 and https://go.dev/issue/51112.
2022-03-07 08:44:52 +00:00
..
bootstrap.mk go: Remove previous change, fixed in go-bin instead. 2021-07-14 14:32:04 +00:00
DESCR
go-dep.mk lang/go: extend _VARGROUPS section in go-dep.mk 2019-09-10 20:01:06 +00:00
go-module.mk go-module.mk: allow packages that use this to have post-extract & pre-clean 2022-01-20 21:37:11 +00:00
go-package.mk Mark go-package.mk as deprecated. 2021-05-08 15:55:04 +00:00
go-vars.mk go: not ready for PIE 2021-09-27 16:02:36 +00:00
Makefile all: migrate homepages from http to https 2020-01-26 17:30:40 +00:00
version.mk Update go117 to 1.17.8 (security). 2022-03-07 08:44:52 +00:00