head 1.8; access; symbols pkgsrc-2023Q3:1.7.0.16 pkgsrc-2023Q3-base:1.7 pkgsrc-2023Q2:1.7.0.14 pkgsrc-2023Q2-base:1.7 pkgsrc-2023Q1:1.7.0.12 pkgsrc-2023Q1-base:1.7 pkgsrc-2022Q4:1.7.0.10 pkgsrc-2022Q4-base:1.7 pkgsrc-2022Q3:1.7.0.8 pkgsrc-2022Q3-base:1.7 pkgsrc-2022Q2:1.7.0.6 pkgsrc-2022Q2-base:1.7 pkgsrc-2022Q1:1.7.0.4 pkgsrc-2022Q1-base:1.7 pkgsrc-2021Q4:1.7.0.2 pkgsrc-2021Q4-base:1.7 pkgsrc-2021Q3:1.5.0.14 pkgsrc-2021Q3-base:1.5 pkgsrc-2021Q2:1.5.0.12 pkgsrc-2021Q2-base:1.5 pkgsrc-2021Q1:1.5.0.10 pkgsrc-2021Q1-base:1.5 pkgsrc-2020Q4:1.5.0.8 pkgsrc-2020Q4-base:1.5 pkgsrc-2020Q3:1.5.0.6 pkgsrc-2020Q3-base:1.5 pkgsrc-2020Q2:1.5.0.4 pkgsrc-2020Q2-base:1.5 pkgsrc-2020Q1:1.5.0.2 pkgsrc-2020Q1-base:1.5 pkgsrc-2019Q4:1.4.0.18 pkgsrc-2019Q4-base:1.4 pkgsrc-2019Q3:1.4.0.14 pkgsrc-2019Q3-base:1.4 pkgsrc-2019Q2:1.4.0.12 pkgsrc-2019Q2-base:1.4 pkgsrc-2019Q1:1.4.0.10 pkgsrc-2019Q1-base:1.4 pkgsrc-2018Q4:1.4.0.8 pkgsrc-2018Q4-base:1.4 pkgsrc-2018Q3:1.4.0.6 pkgsrc-2018Q3-base:1.4 pkgsrc-2018Q2:1.4.0.4 pkgsrc-2018Q2-base:1.4 pkgsrc-2018Q1:1.4.0.2 pkgsrc-2018Q1-base:1.4 pkgsrc-2017Q4:1.3.0.8 pkgsrc-2017Q4-base:1.3 pkgsrc-2017Q3:1.3.0.6 pkgsrc-2017Q3-base:1.3 pkgsrc-2017Q2:1.3.0.2 pkgsrc-2017Q2-base:1.3 pkgsrc-2017Q1:1.2.0.2 pkgsrc-2017Q1-base:1.2 pkgsrc-2016Q4:1.1.0.8 pkgsrc-2016Q4-base:1.1 pkgsrc-2016Q3:1.1.0.6 pkgsrc-2016Q3-base:1.1 pkgsrc-2016Q2:1.1.0.4 pkgsrc-2016Q2-base:1.1 pkgsrc-2016Q1:1.1.0.2 pkgsrc-2016Q1-base:1.1; locks; strict; comment @# @; 1.8 date 2023.10.19.18.44.49; author bsiegert; state dead; branches; next 1.7; commitid 8WG8Fewvs2lVCgJE; 1.7 date 2021.10.26.11.17.07; author nia; state Exp; branches; next 1.6; commitid PNswNV9GDLZeojeD; 1.6 date 2021.10.07.14.53.50; author nia; state Exp; branches; next 1.5; commitid nfjKlj1wTplMcTbD; 1.5 date 2020.02.03.13.14.20; author bsiegert; state Exp; branches; next 1.4; commitid yvJasEE8bEVCjeVB; 1.4 date 2018.03.11.20.43.33; author bsiegert; state Exp; branches; next 1.3; commitid 7GraFxiPV4Sx65uA; 1.3 date 2017.05.02.17.06.30; author fhajny; state Exp; branches; next 1.2; commitid 2FAr75sCARRDYPPz; 1.2 date 2017.03.16.19.27.36; author bsiegert; state Exp; branches; next 1.1; commitid KW8ne9xNypoxfOJz; 1.1 date 2015.12.27.20.12.47; author wiz; state Exp; branches; next ; commitid dzpskNbcqZljPCOy; desc @@ 1.8 log @go-crypto: remove This is only useful for old-style Go package builds, which are going away. The rationale is the same as for net/go-net. @ text @$NetBSD: distinfo,v 1.7 2021/10/26 11:17:07 nia Exp $ BLAKE2s (go-crypto-0.0.20200122-69ecbb4d6d.tar.gz) = f102940d78a3f3cfb384efb1611870c21c51501a97546e4d262b0c1f4e6ba90a SHA512 (go-crypto-0.0.20200122-69ecbb4d6d.tar.gz) = 74733829ea5d5f8dc553d181219fa671142eaa446ebc020e1c2d09e0efb864bb7c6fd175a7ec2da4220086d843995fea5488223c903f01ee992130f6a2621b8e Size (go-crypto-0.0.20200122-69ecbb4d6d.tar.gz) = 1720483 bytes @ 1.7 log @security: Replace RMD160 checksums with BLAKE2s checksums All checksums have been double-checked against existing RMD160 and SHA512 hashes Unfetchable distfiles (fetched conditionally?): ./security/cyrus-sasl/distinfo cyrus-sasl-dedad73e5e7a75d01a5f3d5a6702ab8ccd2ff40d.patch.v2 @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.6 2021/10/07 14:53:50 nia Exp $ @ 1.6 log @security: Remove SHA1 hashes for distfiles @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.5 2020/02/03 13:14:20 bsiegert Exp $ d3 1 a3 1 RMD160 (go-crypto-0.0.20200122-69ecbb4d6d.tar.gz) = 4f8455fcdfbd8f7a5810a7de95f1e1c77ecdef64 @ 1.5 log @Update go-crypto to 0.0.20200122. In addition to about two years of changes, this contains notably the following security fix: When int is 32 bits wide (on 32-bit architectures like 386 and arm), an overflow could occur, causing a panic, due to malformed ASN.1 being passed to any of the ASN1 methods of String. Tested on linux/386 and darwin/amd64. This fixes CVE-2020-7919 and was found thanks to the Project Wycheproof test vectors. pkgsrc changes: Once again, the acme subdirectory was removed as it introduces a circular dependency with go-net. Prodded several times by ng0@@ @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.4 2018/03/11 20:43:33 bsiegert Exp $ a2 1 SHA1 (go-crypto-0.0.20200122-69ecbb4d6d.tar.gz) = fb78c506c62b77d16628ddd177a9ca9e562088c9 @ 1.4 log @Update go-crypto to 0.0.20180308. No changelog from upstream. The circular dependency that prompted splitting this package is no longer an issue, as acme now depends on context instead of golang.org/x/net/context. Thus, this package now contains what used to be go-crypto-acme and conflicts with it. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.3 2017/05/02 17:06:30 fhajny Exp $ d3 4 a6 4 SHA1 (go-crypto-0.0.20180308-c7dcf104e3.tar.gz) = 1322992aaebe336ce424954c196e49a076ee017c RMD160 (go-crypto-0.0.20180308-c7dcf104e3.tar.gz) = 3d8f852250f3f78557476b624e7c9e3b25db33b0 SHA512 (go-crypto-0.0.20180308-c7dcf104e3.tar.gz) = e22312a9a4c87ee35e1df182cafa4016733780a37bd8688f1d5cb87b47306b60bc7f8b24d69ecd9e00482483100849b6e821e6c8c96eccff02f65a9c71fc629e Size (go-crypto-0.0.20180308-c7dcf104e3.tar.gz) = 1451474 bytes @ 1.3 log @Update go-crypto to state as of 20170502, no changelog available. Fix build on (at least) SunOS by depending on go-sys. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.2 2017/03/16 19:27:36 bsiegert Exp $ d3 4 a6 4 SHA1 (go-crypto-0.0.20170502-8e03fc1ab6.tar.gz) = 9ca2509af63d3b9a366bae97fec3273028f5ffb0 RMD160 (go-crypto-0.0.20170502-8e03fc1ab6.tar.gz) = e70c123d58914240cf4cb20bcd3c6b1bc13e2139 SHA512 (go-crypto-0.0.20170502-8e03fc1ab6.tar.gz) = efcc9cb7d4b526a3d27a17198db3cfecdd5f2c7a9242244cdce0f8519b58aae2ac2287749d521504f43b56795b2811496b7a6bb62ad450c9ff62801a39638a53 Size (go-crypto-0.0.20170502-8e03fc1ab6.tar.gz) = 1331613 bytes @ 1.2 log @Update go-crypto to 20170317, part of PR pkg/52081. No changelog from upstream but there is a new acme package for Let's Encrypt certificates. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.1 2015/12/27 20:12:47 wiz Exp $ d3 4 a6 4 SHA1 (go-crypto-0.0.20170317-728b753.tar.gz) = 9b0e0b79e1c3a4137a9b05d885f442f131ea1c4b RMD160 (go-crypto-0.0.20170317-728b753.tar.gz) = dfd49c29c53a569ff8f78ea9cb11e98b9c121f71 SHA512 (go-crypto-0.0.20170317-728b753.tar.gz) = 163ca4b00188133d5c4d82dd685deaf2b889ae76b97021697d96dd8f11675a57361352e204d774a6fb7941f45dc8027ddb324abf0a4799ed19c3052181536992 Size (go-crypto-0.0.20170317-728b753.tar.gz) = 1317212 bytes @ 1.1 log @Import go-crypto-0.0.20151215 as security/go-crypto. Supplementary Go cryptography libraries. XXX: there is no proper release for this, so this packages todays git master head. @ text @d1 1 a1 1 $NetBSD$ d3 4 a6 4 SHA1 (go-crypto-0.0.20151215-f18420efc3b4f8e9f3d51f6bd2476e92c46260e9.tar.gz) = a1b11e6fceeb4f0aac6153dd258aa1939f7db6ac RMD160 (go-crypto-0.0.20151215-f18420efc3b4f8e9f3d51f6bd2476e92c46260e9.tar.gz) = b7ff8704d8499cc3b9329b2f405d8f5fee5465b1 SHA512 (go-crypto-0.0.20151215-f18420efc3b4f8e9f3d51f6bd2476e92c46260e9.tar.gz) = 71b988135bf8f4f52e5c32f59e1230e99bba1f851d8138be0257d1136131272313951bd2055aad00c10a074f40f6d87b5564ebc67f268cba09794feea05e7d4a Size (go-crypto-0.0.20151215-f18420efc3b4f8e9f3d51f6bd2476e92c46260e9.tar.gz) = 898056 bytes @