Advisories » MGASA-2016-0317

Updated golang package fixes security vulnerability

Publication date: 23 Sep 2016
Modification date: 23 Sep 2016
Type: security
Affected Mageia releases : 5
CVE: CVE-2016-5386

Description

Updated golang packages fix security vulnerability:

Go: sets environmental variable based on user supplied Proxy request header
(CVE-2016-5386).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=19102
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/OR52UXGM6RKSCWF3KQMVZGVZVJ3WEESJ/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5386

SRPMS

5/core

• golang-1.6.3-1.mga5