Security update for go (important)

2018-12-2915:09:17

lists.opensuse.org

0.379 Low

EPSS

Percentile

96.9%

JSON

This update for go fixes the following issues:

golang: arbitrary command execution via VCS path (bsc#1081495,
CVE-2018-7187)
Make profile.d/go.sh no longer set GOROOT=, in order to make switching
between versions no longer break. This ends up removing the need for
go.sh entirely (because GOPATH is also set automatically) (boo#1119634)
Fix a regression that broke go get for import path patterns containing
"…" (bsc#1119706)

Additionally, the package go1.10 has been added.

This update was imported from the SUSE:SLE-15:Update update project.

OSVersionArchitecturePackageVersionFilename
openSUSE Backports SLE15ppc64lego< 1.10.4-bp150.2.3.1go-1.10.4-bp150.2.3.1.ppc64le.rpm
openSUSE Backports SLE15x86_64go-doc< 1.10.4-bp150.2.3.1go-doc-1.10.4-bp150.2.3.1.x86_64.rpm
openSUSE Backports SLE15ppc64lego1.10-doc< 1.10.7-bp150.2.1go1.10-doc-1.10.7-bp150.2.1.ppc64le.rpm
openSUSE Backports SLE15s390xgo< 1.10.4-bp150.2.3.1go-1.10.4-bp150.2.3.1.s390x.rpm
openSUSE Backports SLE15aarch64go-doc< 1.10.4-bp150.2.3.1go-doc-1.10.4-bp150.2.3.1.aarch64.rpm
openSUSE Backports SLE15s390xgo1.10-doc< 1.10.7-bp150.2.1go1.10-doc-1.10.7-bp150.2.1.s390x.rpm
openSUSE Backports SLE15ppc64lego1.10< 1.10.7-bp150.2.1go1.10-1.10.7-bp150.2.1.ppc64le.rpm
openSUSE Backports SLE15x86_64go-race< 1.10.4-bp150.2.3.1go-race-1.10.4-bp150.2.3.1.x86_64.rpm
openSUSE Backports SLE15x86_64go1.10-doc< 1.10.7-bp150.2.1go1.10-doc-1.10.7-bp150.2.1.x86_64.rpm
openSUSE Backports SLE15aarch64go1.10-doc< 1.10.7-bp150.2.1go1.10-doc-1.10.7-bp150.2.1.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
openSUSE Backports SLE	15	ppc64le	go	< 1.10.4-bp150.2.3.1	go-1.10.4-bp150.2.3.1.ppc64le.rpm
openSUSE Backports SLE	15	x86_64	go-doc	< 1.10.4-bp150.2.3.1	go-doc-1.10.4-bp150.2.3.1.x86_64.rpm
openSUSE Backports SLE	15	ppc64le	go1.10-doc	< 1.10.7-bp150.2.1	go1.10-doc-1.10.7-bp150.2.1.ppc64le.rpm
openSUSE Backports SLE	15	s390x	go	< 1.10.4-bp150.2.3.1	go-1.10.4-bp150.2.3.1.s390x.rpm
openSUSE Backports SLE	15	aarch64	go-doc	< 1.10.4-bp150.2.3.1	go-doc-1.10.4-bp150.2.3.1.aarch64.rpm
openSUSE Backports SLE	15	s390x	go1.10-doc	< 1.10.7-bp150.2.1	go1.10-doc-1.10.7-bp150.2.1.s390x.rpm
openSUSE Backports SLE	15	ppc64le	go1.10	< 1.10.7-bp150.2.1	go1.10-1.10.7-bp150.2.1.ppc64le.rpm
openSUSE Backports SLE	15	x86_64	go-race	< 1.10.4-bp150.2.3.1	go-race-1.10.4-bp150.2.3.1.x86_64.rpm
openSUSE Backports SLE	15	x86_64	go1.10-doc	< 1.10.7-bp150.2.1	go1.10-doc-1.10.7-bp150.2.1.x86_64.rpm
openSUSE Backports SLE	15	aarch64	go1.10-doc	< 1.10.7-bp150.2.1	go1.10-doc-1.10.7-bp150.2.1.aarch64.rpm