PT-2018-2521

Name of the Vulnerable Software and Affected Versions Go versions prior to 1.8.7 Go 1.9.x versions prior to 1.9.4 Go 1.10 pre-releases prior to Go 1.10rc2 Description The issue is related to the "go get" command in the Go programming language, which allows remote command execution during source...

Reproducing Go binaries byte-by-byte

Fully reproducible builds are important because they bridge the gap between auditable open source and convenient binary artifacts. Technologies like TUF and Binary Transparency provide accountability for what binaries are shipped to users, but that's of limited utility if there is no way short of...

openSUSE Security Update : docker / go (openSUSE-SU-2014:1411-1)

Docker was updated to version 1.3.1 to fix two security issues and several other bugs. These security issues were fixed : - Prevent fallback to SSL protocols lower than TLS 1.0 for client, daemon and registry CVE-2014-5277. - Secure HTTPS connection to registries with certificate verification and...