Advisories ยป MGASA-2018-0144

Updated golang packages fix security vulnerability

Publication date: 26 Feb 2018
Modification date: 26 Feb 2018
Type: security
Affected Mageia releases : 6
CVE: CVE-2018-6574

Description

Updated golang packages fix security vulnerabilities:

Go before 1.9.4 allows "go get" remote command execution during source code
build, by leveraging the gcc or clang plugin feature, because -fplugin= and
-plugin= arguments were not blocked (CVE-2018-6574).
                

References

SRPMS

6/core