Red Hat Security AdvisoryRHSA-2018:1304
go-toolset-7 and go-toolset-7-golang security and bug fix update
Released 2018-05-03 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7) go-toolset-7-1.8-14.el7, go-toolset-7-build-1.8-14.el7, go-toolset-7-golang-1.8.7-2.el7 +8
- Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7) go-toolset-7-1.8-14.el7, go-toolset-7-build-1.8-14.el7, go-toolset-7-golang-1.8.7-2.el7 +8
Fixes 1 record
Priority MEDIUM 44
Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow "go get" remote command execution during source code build, by leveraging the gcc or clang plugin feature, because -fplugin= and -p…
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.07625 · Published 2018-02-07 · Partial fix CWE-94
