[pkg-golang-devel] Bug#877830: golang-1.9: 1.9.1 appears to fix what may be nontrivial security issues

Rob Browning rlb at defaultvalue.org
Fri Oct 6 01:37:26 UTC 2017


Package: golang-1.9
Version: 1.9-1

"smtp.PlainAuth susceptible to man-in-the-middle password harvesting [Go 1.9]"
"cmd/go: arbitrary code execution during “go get” or “go get -d” [Go 1.9]"

cf. https://github.com/golang/go/issues?q=milestone%3AGo1.9.1

Thanks
-- 
Rob Browning
rlb @defaultvalue.org and @debian.org
GPG as of 2011-07-10 E6A9 DA3C C9FD 1FF8 C676 D2C4 C0F0 39E9 ED1B 597A
GPG as of 2002-11-03 14DD 432F AE39 534D B592 F9A0 25C8 D377 8C7E 73A4



More information about the pkg-golang-devel mailing list