svn commit: r406071 - head/lang/go

[Jason Unovitch]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On Wed, Jan 13, 2016 at 10:11:06PM +0000, Julien Laffaye wrote:
> Author: jlaffaye
> Date: Wed Jan 13 22:11:05 2016
> New Revision: 406071
> URL: https://svnweb.freebsd.org/changeset/ports/406071
> 
> Log:
>   - Update to 1.5.3
> 
Julien,
Looks like this this would need to MFH. Any thoughts on the best way to
handle the language from the announcement? Should we bump PORTREVISION
on some/all Go programs to meet the "must be recompiled with Go
1.5.3 in order to receive the fix".

http://www.openwall.com/lists/oss-security/2016/01/13/7

"A security-related issue has been reported in Go's math/big package.
The
issue was introduced in Go 1.5. We recommend that all users upgrade to
Go 1.5.3, which fixes the issue. Go programs must be recompiled with Go
1.5.3 in order to receive the fix."
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=
=Tppc
-----END PGP SIGNATURE-----