Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 441
Alerts This Week
Warning Icon 1 441

Debian: DLA-1148-1 Critical: Golang Remote Command Execution Risk

debian lts
Calendar Grey October 27, 2017
Dist Debian Esm H88
Upgrade your Go installation to fix the remote execution vulnerability affecting versions before 1.8.4 and the 1.9.x series before 1.9.1 due to insecure hooks
Go before 1.8.4 and 1.9.x before 1.9.1 allows "go get" remote command execution
Topics%20covered

Topics Covered

security advisory debian exploit remote command execution upgrade golang

Summary

We recommend that you upgrade your golang packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
critical
Lowest
Low
Medium
High
Critical

<pre><font face="Courier">Package: golang
Version: 2:1.0.2-1.1+deb7u2
CVE ID: CVE-2017-15041

Topics%20covered

Topics Covered

security advisory debian exploit remote command execution upgrade golang

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.