EUVD-2012-2649

Malware in sbrugna...

CVE-2012-2666

CVE-2012-2666 concerns the Go project. According to connected sources, the root cause is that dotest() in src/pkg/debug/gosym/pclntab_test.go creates a temporary file with a predictable name and then executes it as a shell script. The practical implication is potential arbitrary code execution if...