Port details

lang/go 1.27_21,2

Meta-port for the default version of the Go programming language

unaddressed

VuXML only

fixed

open problem reports

Port info

Maintainer: go@FreeBSD.org
Packages: latest: 1.27_21,2
Upstream: up to date
Last update: 2026-09-03 to 1.27_21,2 · dd0905142a
Quarterly: 2026Q4: 1.26_21,2 28 unaddressed
WWW: https://golang.org
Links: cgit · VuXML

Install

Package

# pkg install go

installs 1.27_21,2 from latest; from quarterly (2026Q4) 1.26_21,2

Port

# cd /usr/ports/lang/go && make install clean

Size

1.5 KiB download · 256 B installed

Depends on

lang/go127 1.27.3

License

Packages by version and architecture

latest

FreeBSD version	amd64	aarch64	i386
FreeBSD 16	1.27_21,2	1.27_21,2	–
FreeBSD 15	1.27_21,2	1.27_21,2	–
FreeBSD 14	1.27_21,2	1.27_21,2	1.27_21,2

quarterly (2026Q4)

FreeBSD version	amd64	aarch64	i386
FreeBSD 15	1.26_21,2	1.26_21,2	–
FreeBSD 14	1.26_21,2	1.26_21,2	1.26_21,2

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (2)

The CVE record lists the packaged version 1.27_21,2 as affected, and no VuXML entry names the CVE. What does this mean?

CVE	CVSS	Published	Description
CVE-2026-39822	7.8	2026-07-08	On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link…
CVE-2026-42505	5.3	2026-07-08	Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted cli…

VuXML only (0)

Listed in VuXML, the packaged version 1.27_21,2 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (21)

Show 21 fixed

VuXML entries whose affected range the packaged version has left.

go -- syscall.Faccessat checks wrong group on Linuxentered 2022-05-15

CVE-2022-29526

go -- multiple vulnerabilitiesentered 2022-05-02

CVE-2022-24675, CVE-2022-27536, CVE-2022-28327

go -- multiple vulnerabilitiesentered 2022-03-19

CVE-2022-24921

go -- multiple vulnerabilitiesentered 2022-02-18

CVE-2022-23772, CVE-2022-23773, CVE-2022-23806

go -- multiple vulnerabilitiesentered 2021-12-09

CVE-2021-44716, CVE-2021-44717

go -- multiple vulnerabilitiesentered 2021-11-05

CVE-2021-41771, CVE-2021-41772

go -- misc/wasm, cmd/link: do not let command line arguments overwrite global dataentered 2021-10-09

CVE-2021-38297

go -- archive/zip: overflow in preallocation check can cause OOM panicentered 2021-09-10

CVE-2021-39293

go -- net/http: panic due to racy read of persistConn after handler panicentered 2021-08-05

CVE-2021-36221

go -- crypto/tls: clients can panic when provided a certificate of the wrong type for the negotiated parametersentered 2021-07-12

CVE-2021-34558

go -- multiple vulnerabilitiesentered 2021-06-03

CVE-2021-33195, CVE-2021-33196, CVE-2021-33197, CVE-2021-33198

go -- net/http: ReadRequest can stack overflow due to recursion with very large headersentered 2021-05-06

CVE-2021-31525

go -- encoding/xml: infinite loop when using xml.NewTokenDecoder with a custom TokenReader; archive/zip: panic when calling Reader.Openentered 2021-03-10

CVE-2021-27918, CVE-2021-27919

go -- cmd/go: packages using cgo can cause arbitrary code execution at build time; crypto/elliptic: incorrect operations on the P-224 curveentered 2021-01-19

CVE-2021-3114, CVE-2021-3115

go -- math/big: panic during recursive division of very large numbers; cmd/go: arbitrary code execution at build time through cgoentered 2020-11-12

CVE-2020-28362, CVE-2020-28366, CVE-2020-28367

go -- net/http/cgi, net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specifiedentered 2020-09-01

CVE-2020-24553

go -- encoding/binary: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputsentered 2020-08-06

CVE-2020-16845

go -- invalid headers are normalized, allowing request smugglingentered 2019-09-26

CVE-2019-16276

go -- remote denial of serviceentered 2016-04-14

CVE-2016-3959

go -- information disclosure vulnerabilityentered 2016-01-18

CVE-2015-8618

go -- multiple vulnerabilitiesentered 2015-08-25

CVE-2015-5739, CVE-2015-5740, CVE-2015-5741

Problem reports (4) · open in Bugzilla, most recently changed first

PR	Summary	Status	Changed
273568	maintainer-feedback? lang/go: ease debugging of ports utilizing go	New	2025-09-20
277529	maintainer-feedback? lang/go*: doesn't respect MAKE_JOBS_NUMBER while building	New	2025-07-11
286214	merge-quarterly- lang/go: Provide only one go version	In Progress	2025-06-10
283314	maintainer-feedback? lang/go Go applications segfault on VM infrastructure reliably	New	2025-01-02

Commits (184)

2021-07-13 14:03Dmitri Goutnik (dmgk) · 1.16.6,1

lang/go: Update to 1.16.6

Changes:	https://golang.org/doc/devel/release#go1.16.minor
Security:	c365536d-e3cf-11eb-9d8d-b37b683944c2

720b8bdcb4

2021-06-04 01:17Dmitri Goutnik (dmgk) · 1.16.5,1

lang/go: Update to 1.16.5

Changes:	https://golang.org/doc/devel/release#go1.16.minor
Security:	079b3641-c4bd-11eb-a22a-693f0544ae52

4b0da804cc

2021-05-06 22:21Dmitri Goutnik (dmgk) · 1.16.4,1

lang/go: Update to 1.16.4

Changes:	https://golang.org/doc/devel/release.html#go1.16.minor
Security:	7f242313-aea5-11eb-8151-67f74cf7c704

008d020972

2021-04-06 16:51Dmitri Goutnik (dmgk) · 1.16.3,1

lang/go: Update to 1.16.3

Changes:	https://golang.org/doc/devel/release.html#go1.16.minor

0c2d584584

2021-04-06 16:31Mathieu Arnold (mat) · 1.16.2,1

Remove # $FreeBSD$ from Makefiles.

305f148f48

2021-03-12 14:07Dmitri Goutnik (dmgk) · 1.16.2,1

lang/go: Update to 1.16.2

Changes:	https://golang.org/doc/devel/release.html#go1.16.minor

af628fdb1a

2021-03-11 00:41Dmitri Goutnik (dmgk) · 1.16.1,1

lang/go: Update to 1.16.1

Changes:	https://golang.org/doc/devel/release.html#go1.16.minor
Security:	72709326-81f7-11eb-950a-00155d646401

52726c1e20

2021-02-17 12:44Dmitri Goutnik (dmgk) · 1.16,1

lang/go: Update to 1.16

Changes:	https://golang.org/doc/go1.16

4388542076

2021-02-05 12:54Dmitri Goutnik (dmgk) · 1.15.8,1

lang/go: Update to 1.15.8

Changes:	https://golang.org/doc/devel/release.html#go1.15.minor

d370df2e39

2021-01-20 01:37Dmitri Goutnik (dmgk) · 1.15.7,1

lang/go: Update to 1.15.7

Changes:	https://groups.google.com/g/golang-announce/c/mperVMGa98w?pli=1
Security:	6a4805d5-5aaf-11eb-a21d-79f5bc5ef6a9

74b7ebe1ee

2020-12-03 23:19Dmitri Goutnik (dmgk) · 1.15.6,1

lang/go: Update to 1.15.6

Changes:	https://golang.org/doc/devel/release.html#go1.15.minor

ca2b896428

2020-11-12 22:30Dmitri Goutnik (dmgk) · 1.15.5,1

lang/go: Update to 1.15.5

Changes:	https://golang.org/doc/devel/release.html#go1.15.minor
MFH:		2020Q4
Security:	db4b2f27-252a-11eb-865c-00155d646400

b2d1fb206e

2020-11-06 13:31Dmitri Goutnik (dmgk) · 1.15.4,1

lang/go: Update to 1.15.4

Changes:	https://golang.org/doc/devel/release.html#go1.15.minor

15e84d99f5

2020-10-15 13:32Dmitri Goutnik (dmgk) · 1.15.3,1

lang/go: Update to 1.15.3

Changes:	https://golang.org/doc/devel/release.html#go1.15.minor

a669660e00

2020-09-10 15:46Dmitri Goutnik (dmgk) · 1.15.2,1

lang/go: Update to 1.15.2

Changes:	https://golang.org/doc/devel/release.html#go1.15.minor

d1130526c4

2020-09-01 21:36Dmitri Goutnik (dmgk) · 1.15.1,1

lang/go: Update to 1.15.1

Changes:	https://golang.org/doc/devel/release.html#go1.15.minor
Security:	67b050ae-ec82-11ea-9071-10c37b4ac2ea

b4b81814c1

2020-08-12 00:42Dmitri Goutnik (dmgk) · 1.15,1

lang/go: Update to 1.15

Changes:	https://golang.org/doc/go1.15

335271023a

2020-08-06 19:38Dmitri Goutnik (dmgk) · 1.14.7,1

lang/go: Update to 1.14.7

Changes:	https://golang.org/doc/devel/release.html#go1.14.minor
MFH:		2020Q3
Security:	bc7aff8c-d806-11ea-a5aa-0800272260e5

057014b5f2

2020-07-17 15:02Dmitri Goutnik (dmgk) · 1.14.6,1

lang/go: Update to 1.14.6

Changes:	https://golang.org/doc/devel/release.html#go1.14.minor

b73afa049c

2020-07-15 15:12Dmitri Goutnik (dmgk) · 1.14.5,1

lang/go: Update to 1.14.5

Changes:	https://golang.org/doc/devel/release.html#go1.14.minor

10a35a6853

2020-06-02 15:09Dmitri Goutnik (dmgk) · 1.14.4,1

lang/go: Update to 1.14.4

Changes:	https://golang.org/doc/devel/release.html#go1.14.minor

c5b2031734

2020-05-15 20:49Dmitri Goutnik (dmgk) · 1.14.3,1

lang/go: Update to 1.14.3

Changes:	https://golang.org/doc/devel/release.html#go1.14.minor

853e3aa64e

2020-04-13 21:16Dmitri Goutnik (dmgk) · 1.14.2,1

lang/go-devel: Convert to a slave of lang/go, apply D24122

- Convert lang/go-devel to a slave port of lang/go
- Apply D24122 (similar to r530387 for lang/go) to relax module consistency
  checks in go1.14 mode

Reviewed by:	mikael tobik
Differential Revision:	https://reviews.freebsd.org/D24397

580c57d783

2020-04-09 14:07Dmitri Goutnik (dmgk) · 1.14.2,1

lang/go: Update to 1.14.2

Put back aarch64 OSVERSION check removed in r528785.

Changes:	https://golang.org/doc/devel/release.html#go1.14.minor

39aff2406d

2020-04-06 05:04Adam Weinberger (adamw) · 1.14.1_1,1

go: Assign dmgk as maintainer

It's the only logical next step here.

5b7c91a1fb

2020-04-05 20:33Yuri Victorovich (yuri) · 1.14.1_1,1

Reset maintainer for ports maintaned by jlaffaye@.

As per policy, based on timeouts on
* www/py-scgi: bug#244982
* textproc/discount: bug#244981
* devel/py-python-gflags: bug#244965
* lang/go: bug#244783, https://reviews.freebsd.org/D24122
* news/py-yenc: bug#239309
* irc/libircclient: bug#221567

88cc504565

2020-04-02 19:29Dmitri Goutnik (dmgk) · 1.14.1_1,1

lang/go: relax module consistency checks if vendor/modules.txt is missing

Starting from go1.14, go verifies that vendor/modules.txt matches the
requirements and replacements listed in the main module go.mod file, and it is
a hard failure if vendor/modules.txt is missing.

Relax module consistency checks and switch back to pre go1.14 behaviour if
vendor/modules.txt is missing and GO_NO_VENDOR_CHECKS=1 is set in the
environment regardless of go version requirement in go.mod.

Upstream PR: https://github.com/golang/go/issues/37948

PR:		244783
Reported by:	Christopher Hall <hsw@bitmark.com>
Reviewed by:	mikael swills yuri
Approved by:	jlaffaye (maintainer timeout, 2 weeks)
MFH:		2020Q2
Differential Revision:	https://reviews.freebsd.org/D24122

601af82fb7

2020-03-20 16:46Julien Laffaye (jlaffaye) · 1.14.1,1

lang/go: update to 1.14.1

4849bc786e

2020-03-17 12:56Dmitri Goutnik (dmgk) · 1.14_2,1

lang/go: Update bootstrap to go1.14 final release

Approved by:	jlaffaye (maintainer timeout, 2 weeks)
Differential Revision:	https://reviews.freebsd.org/D23924

494ef92d61

2020-03-02 13:34Dmitri Goutnik (dmgk) · 1.14_1,1

lang/go: Switch to the new bootstrap, add aarch64 support

PR:		244494
Reviewed by:	tobik, mikael
Approved by:	jlaffaye (maintainer timeout, >1 month)
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D23151

655e823288

2020-02-26 00:42Julien Laffaye (jlaffaye) · 1.14,1

lang/go: update to 1.14

980825dbf0

2020-01-28 19:26Julien Laffaye (jlaffaye) · 1.13.7,1

lang/go: update to 1.13.7

6d5ea1d47b

2019-12-07 00:35Julien Laffaye (jlaffaye) · 1.13.5,1

lang/go: update to 1.13.5

76bb01ae45

2019-11-04 22:47Julien Laffaye (jlaffaye) · 1.13.4,1

lang/go: update to 1.13.4

c82e92d72c

2019-10-18 02:04Julien Laffaye (jlaffaye) · 1.13.3,1

lang/go: update to 1.13.3

f87fcb6ad8

2019-09-28 01:00Julien Laffaye (jlaffaye) · 1.13.1,1

lang/go: update to 1.13.1

43b560b6e2

2019-09-04 04:45Julien Laffaye (jlaffaye) · 1.13,1

lang/go: update to 1.13

13e01cfd62

2019-08-21 21:29Julien Laffaye (jlaffaye) · 1.12.9,1

lang/go: update to 1.12.9

17e61f7e78

2019-08-14 01:39Julien Laffaye (jlaffaye) · 1.12.8,1

lang/go: update to 1.12.8

6b0deb0136

2019-07-09 23:32Julien Laffaye (jlaffaye) · 1.12.7,1

lang/go: update to 1.12.7

6a97e193bd

2019-06-23 13:38Tobias Kortkamp (tobik) · 1.12.6,1

New port: lang/go-devel

A development snapshot of lang/go.  This port is intended to be
used by port maintainers for testing with future Go versions.

PR:		238374
Submitted by:	dg@syrec.org

9a3c0ab0ca

2019-06-12 11:39Julien Laffaye (jlaffaye) · 1.12.6,1

lang/go: update to 1.12.6

abf6ee1855

2019-05-07 16:02Julien Laffaye (jlaffaye) · 1.12.5,1

Update to 1.12.5

7f59b622dc

2019-04-23 23:18Julien Laffaye (jlaffaye) · 1.12.4,1

- Update to 1.12.4 - Various ARM improvements [1] - Disable building in qemu-user-static [1] - Fix test target [1]

PR:		221297
Submitted by:	Dmitri Goutnik <dg@syrec.org> [1]

91ee33dd02

2019-04-06 21:20Julien Laffaye (jlaffaye) · 1.12.2,1

- Update to 1.12.2

a567ac2631

2019-03-14 23:54Julien Laffaye (jlaffaye) · 1.12.1,1

- Update to 1.12.1 - Remove useless files after build (this saves 150M in my tests)

cba1a8907e

2019-03-02 19:31Julien Laffaye (jlaffaye) · 1.12_1,1

Fix shebang and simplify shebangfix

PR:		236159
Submitted by:	sunpoet

fa21a789e6

2019-02-26 14:53Julien Laffaye (jlaffaye) · 1.12,1

Update to 1.12

eec4c466f3

2019-01-24 13:54Julien Laffaye (jlaffaye) · 1.11.5,1

Update to 1.11.5

Security:	CVE-2019-6486

c450afbdcf

2018-12-15 15:07Julien Laffaye (jlaffaye) · 1.11.4,1

Update to 1.11.4

9db5a81580

comms/libimobiledevice +1 related 5 unaddressed · 6.9	Oct 26
devel/libgsf 1 unaddressed · 5.3	Oct 26
www/p5-Plack 1 unaddressed · –	Oct 25
www/p5-Starman 4 unaddressed · –	Oct 25
www/p5-Web-Simple 1 unaddressed · –	Oct 24
devel/open62541 1 CVE · 9.2 fixed 1.5.8	Oct 24
dns/lua-resty-dns 1 unaddressed · 6.3	Oct 24
devel/libwasmtime 2 unaddressed · 9.9	Oct 23
devel/py-twisted 7 unaddressed · 8.7	Oct 23
www/p5-HTTP-Headers-ActionPack 1 unaddressed · –	Oct 23
print/py-pypdf 25 unaddressed · 8.7	Oct 23
www/phpbb3 1 unaddressed · 8.3	Oct 23
net-mgmt/cacti 1 unaddressed · 8.8 VuXML	Oct 23
deskutils/xdg-desktop-portal 2 CVEs · 8.8 fixed 1.22.1	Oct 23
graphics/qt6-3d +29 related 7 CVEs · 8.7 fixed 6.11.2	Oct 23

ImageMagick6	Oct 26
ImageMagick6-nox11	Oct 26
ImageMagick7	Oct 26
ImageMagick7-nox11	Oct 26
node	Oct 24
node22	Oct 24
node24	Oct 24
node26	Oct 24
traefik	Oct 24
ca_root_nss	Oct 23
gitlab-ce	Oct 23
gitlab-ee	Oct 23
mailpit	Oct 23
vifm	Oct 23
brotli	Oct 22
chromium	Oct 22
jackson-core	Oct 22
jackson-databind	Oct 22
jackson-databind	Oct 22
keycloak	Oct 22
linux-chrome	Oct 22
ungoogled-chromium	Oct 22
FreeBSD	Oct 21
p5-DBI	Oct 21
php82	Oct 21