Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

Debian: DLA-1148-1 Critical: Golang Remote Command Execution Risk

debian lts
Calendar Grey October 27, 2017
Dist Debian Esm H88
Upgrade your Go installation to fix the remote execution vulnerability affecting versions before 1.8.4 and the 1.9.x series before 1.9.1 due to insecure hooks
Go before 1.8.4 and 1.9.x before 1.9.1 allows "go get" remote command execution

Summary

We recommend that you upgrade your golang packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
critical
Lowest
Low
Medium
High
Critical

<pre><font face="Courier">Package: golang
Version: 2:1.0.2-1.1+deb7u2
CVE ID: CVE-2017-15041

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here