Lucene search

K
mageiaGentoo FoundationMGASA-2018-0144
HistoryFeb 26, 2018 - 7:23 p.m.

Updated golang packages fix security vulnerability

2018-02-2619:23:22
Gentoo Foundation
advisories.mageia.org
10

0.016 Low

EPSS

Percentile

87.6%

Updated golang packages fix security vulnerabilities: Go before 1.9.4 allows “go get” remote command execution during source code build, by leveraging the gcc or clang plugin feature, because -fplugin= and -plugin= arguments were not blocked (CVE-2018-6574).

OSVersionArchitecturePackageVersionFilename
Mageia6noarchgolang< 1.9.4-3golang-1.9.4-3.mga6