bsiegert cda80a138f Update go117 to 1.17.5. ... go1.17.4 (released 2021-12-02) includes fixes to the compiler, linker, runtime, and the go/types, net/http, and time packages. See the Go 1.17.4 milestone on our issue tracker for details. go1.17.5 (released 2021-12-09) includes security fixes to the syscall and net/http packages. See the Go 1.17.5 milestone on our issue tracker for details. When a Go program running on a Unix system is out of file descriptors and calls syscall.ForkExec (including indirectly by using the os/exec package), syscall.ForkExec can close file descriptor 0 as it fails. If this happens (or can be provoked) repeatedly, it can result in misdirected I/O such as writing network traffic intended for one connection to a different connection, or content intended for one file to a different one. This is CVE-2021-44717 and is fixed in Go 1.17.5 and Go 1.16.12. An attacker can cause unbounded memory growth in a Go server accepting HTTP/2 requests. This is CVE-2021-44716 and is fixed in Go 1.17.5 and Go 1.16.12.		2021-12-09 17:25:56 +00:00
..
bootstrap.mk	go: Remove previous change, fixed in go-bin instead.	2021-07-14 14:32:04 +00:00
DESCR	lang: Re-enable lang/go as a meta package.	2018-11-21 11:25:00 +00:00
go-dep.mk	lang/go: extend _VARGROUPS section in go-dep.mk	2019-09-10 20:01:06 +00:00
go-module.mk	go: Add support for GO_EXTRA_MOD_DIRS.	2021-10-06 10:30:22 +00:00
go-package.mk	Mark go-package.mk as deprecated.	2021-05-08 15:55:04 +00:00
go-vars.mk	go: not ready for PIE	2021-09-27 16:02:36 +00:00
Makefile	all: migrate homepages from http to https	2020-01-26 17:30:40 +00:00
version.mk	Update go117 to 1.17.5.	2021-12-09 17:25:56 +00:00