Update to 1.11.3e9b44ffbb2
Port details
lang/go 1.27_21,2
Meta-port for the default version of the Go programming language
Port info
- Maintainer
- go@FreeBSD.org
- Packages
- latest: 1.27_21,2
- Upstream
- up to date
- Last update
- to 1.27_21,2 · dd0905142a
- Quarterly
- 2026Q4: 1.26_21,2 28 unaddressed
- WWW
- https://golang.org
- Links
- cgit · VuXML · Report wrong data
Install
- Package
# pkg install goinstalls 1.27_21,2 fromlatest; fromquarterly(2026Q4) 1.26_21,2- Port
# cd /usr/ports/lang/go && make install clean- Size
- 1.5 KiB download · 256 B installed
- Depends on
- lang/go127 1.27.3
- License
- NA
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 1.27_21,2 | 1.27_21,2 | – |
| FreeBSD 15 | 1.27_21,2 | 1.27_21,2 | – |
| FreeBSD 14 | 1.27_21,2 | 1.27_21,2 | 1.27_21,2 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 1.26_21,2 | 1.26_21,2 | – |
| FreeBSD 14 | 1.26_21,2 | 1.26_21,2 | 1.26_21,2 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed (2)
The CVE record lists the packaged version 1.27_21,2 as affected, and no VuXML entry names the CVE. What does this mean?
| CVE | CVSS | Published | Description |
|---|---|---|---|
| CVE-2026-39822 | 7.8 | 2026-07-08 | On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link… |
| CVE-2026-42505 | 5.3 | 2026-07-08 | Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted cli… |
VuXML only (0)
Listed in VuXML, the packaged version 1.27_21,2 is still in the affected range; pkg audit reports it. What does this mean?
None.
Fixed (21)
Show 21 fixed
VuXML entries whose affected range the packaged version has left.
go -- syscall.Faccessat checks wrong group on Linuxentered 2022-05-15
go -- multiple vulnerabilitiesentered 2022-05-02
go -- multiple vulnerabilitiesentered 2022-03-19
go -- multiple vulnerabilitiesentered 2022-02-18
go -- multiple vulnerabilitiesentered 2021-12-09
go -- multiple vulnerabilitiesentered 2021-11-05
go -- archive/zip: overflow in preallocation check can cause OOM panicentered 2021-09-10
go -- multiple vulnerabilitiesentered 2021-06-03
CVE-2021-33195, CVE-2021-33196, CVE-2021-33197, CVE-2021-33198
go -- invalid headers are normalized, allowing request smugglingentered 2019-09-26
go -- remote denial of serviceentered 2016-04-14
go -- information disclosure vulnerabilityentered 2016-01-18
go -- multiple vulnerabilitiesentered 2015-08-25
Problem reports (4) · open in Bugzilla, most recently changed first
| PR | Summary | Status | Changed |
|---|---|---|---|
| 273568 | maintainer-feedback? lang/go: ease debugging of ports utilizing go | New | 2025-09-20 |
| 277529 | maintainer-feedback? lang/go*: doesn't respect MAKE_JOBS_NUMBER while building | New | 2025-07-11 |
| 286214 | merge-quarterly- lang/go: Provide only one go version | In Progress | 2025-06-10 |
| 283314 | maintainer-feedback? lang/go Go applications segfault on VM infrastructure reliably | New | 2025-01-02 |
Commits (184)
Update to 1.11.1 PR: 231883 Submitted by: Dmitri Goutnik <dg@syrec.org>52cb6b901a
- Update to 1.11 - Scope GO387 port option to i386 PR: 230893 Submitted by: Dmitri Goutnik <dg@syrec.org>a699a37fb0
Update go to 1.10.3 [1], and enable verbose build [2] PR: 228857 [1], 229013 [2] Submitted by: Dmitri Goutnik [1], adamw [2] Approved by: maintainer (jlaffaye) Exp-run by: antoine0b82056c9a
Update to 1.10.2 PR: 228253 Submitted by: Dmitri Goutnik501a500aeb
Update to 1.10.1558907ff0e
Switch some MASTER_SITES from http/ftp to https. Also some cleanup of dead entries. PR: 226203 Submitted by: Sam H Sponsored by: Absolight37677d32e3
- Update to 1.103b52e3a783
Update to 1.9.4a1c7003042
- Update to 1.9.387dce7ba45
Update to 1.9.2c5bd55c13f
For ports that are explicitly enabled on armv6, also enable them on armv7. This has not been tested with an -exp run but should "do no harm". PR: 221894 (partial)3ef3461740
- Update to 1.9.1b82796c5f2
Remove .error introduced by error in r434383 Reported by: Lundin Cahill <lundincahill@gmail.com>d338c8b8ac
Update to 1.99412ea4253
Add pkg-plist target PR: 221759 Submitted by: smhc27a3d99ab
- Update to 1.8.33485c62929
- Fix shebangs - Fix bin/rc in lang/go since we dont have it in base or a port to support it - While in lang/go remove WRKSRC for SHEBANG_FILES - Bump PORTREVISION for package changef51091ad59
Fix build with new shebang checks PR: 218702 Submitted by: Kenji Rikitake <kenji@k2r.org>3e6b6b7704
Update to 1.8.1fe660b8ae5
Fix plist Reported by: pkg-fallout316a696c32
Use pipe2() syscall. It is available on all supported FreeBSD versions. This makes lang/go not depending on pipe() syscall, this not depending on COMPAT_FREEBSD10 kernel. This is adjusted version of 0ebaca6ba27534add5930a95acffa9acff182e2b from the official Go repo. Approved by: jlaffaye58eb4d59ff
- Update to 1.8 - Add option to disable SSE2 [1] - Remove CC when calling make.bash [2] PR: 210612, 2094657a844106a4
Update to 1.7.5677146d9f2
- Update to 1.7.4 PR: 215465 Submitted by: wen6a3078dbd1
Update to 1.7.30f5fe930cf
Update to 1.7.1 PR: 212587 Submitted by: Larry Rosenman <ler@lerctr.org>1b61ca8472
Remove EXTRA_PATCHES forgotten in previous commit PR: 211919 Submitted by: ler@lerctr.org22e2803137
- Update to 1.7, based on [1] - Delete now useless patch PR: 211898 [1] Submitted by: roberto [1]1896b2bfb7
Update to 1.6.3 Security: CVE-2016-53864d6a906c0f
Use relative symlinks to make the port relocation friendlyc4dfb6416c
Move lang/go/files/bsd.go.mk to USES=go. Reviewed by: bapt Sponsored by: Absolight Differential Revision: https://reviews.freebsd.org/D60575d7b880ff0
- Update to 1.6.25009e11706
- Update to 1.6.1 Security: CVE-2016-3958, CVE-2016-39590a9684c34e
Remove ${PORTSDIR}/ from dependencies, categories h, i, j, k, and l.
With hat: portmgr
Sponsored by: Absolighta9dcad2fff- Update to 1.6ada5686a1f
- Update to 1.5.3cbc8cb4ec4
lang/go: fix build on 11i386 Approved by: jlaffaye (maintainer) Obtained from: https://github.com/golang/go/commit/26263354a3d607e1cc6c06be67530dad57f43074da8e4525a8
Improve shebangfix framework
- Support multiple values in *_OLD_CMD, i.e. we can now fix both "/usr/bin/python" and "/usr/bin/env python" at the same time
- Default *_OLD_CMD values are now always appended, so you don't need to specify them in individual ports
- Add lua support (depends on USES=lua)
- Add more default values, such as "/usr/bin/env foo" for python, perl, bash, ruby and lua
- Shebangfix now matches whole words, e.g. we will no longer (erroneously) replace "/usr/bin/perl5.005" with "${perl_CMD}5.005" (but "/usr/bin/perl -tt" is still (correctly) replaced with "${perl_CMD} -tt")
Note that *_OLD_CMD items containing spaces must now be quoted (e.g. perl_OLD_CMD=/bin/perl /usr/bin/perl "/usr/bin/env perl")
Update shebangfix usage according to new rules in many ports:
- Remove *_OLD_CMD for patterns now replaced by default
- Quote custom *_OLD_CMD which contain spaces
Fix shebangfix usage in many ports (irrelevant to infrastructure change):
- Remove redundant SHEBANG_LANG (no need to duplicate default langs)
- Remove redundant *_CMD (such as python_CMD=${LOCALBASE}/bin/python${PYTHON_VER} when USES=python is present)
- Never use *_OLD_CMD in REINPLACE_CMD matchers, these should always look for exact string
Approved by: portmgr (bapt)
Differential Revision: D375667971bd0fblang/go: adjust PLIST_SUB and bsd.go.mk to support DragonFly Change hardcoded "freebsd" to variable (OPSYS:tl) to allow DragonFly to build without patches. PR: 203006 Approved by: maintainer11b141ff1d
lang/go: Restrict if_data8 "extra" patch to FreeBSD The use of OSVERSION to define EXTRA_PATCHES requires an OPSYS check. The extra patch in question is not valid for DragonFly. Approved by: portmgr (bapt, after technical discussion)23ba4e0f8f
- Update to 1.5.17eb1fa0bd9
Fix net package on CURRENT PR: 202504 Submitted by: Maciej Pasternacki <maciej@pasternacki.net>8e614fd8ec
Force GOBIN to the empty string. If GOBIN is already defined in the environment, it can break ports using bsd.go.mk PR: 202675b92eb0deda
Unbreak INDEX on mips/sparc64/ia64 etc.d2aa1dc74e
Update to 1.5f85e996695
- Update to 1.4.22f6989e331
Fix plist on i386aa097967e6
- Update to 1.4fbf520bc22
Fix typo79aafb2cb5