Multiple vulnerabilities have been discovered in Go, the worst of which could lead to information leakage or a denial of service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-lang/go | * | < 1.22.3 | >= 1.22.3 |
Go is an open source programming language that makes it easy to build simple, reliable, and efficient software.
Multiple vulnerabilities have been discovered in Go. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Go users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-lang/go-1.22.3"
Due to Go programs typically being statically compiled, Go users should also recompile the reverse dependencies of the Go language to ensure statically linked programs are remediated:
# emerge --ask --oneshot --verbose @golang-rebuild
Multiple vulnerabilities have been discovered in Go, the worst of which could lead to remote code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-lang/go | * | < 1.20.10 | >= 1.20.10 |
Go is an open source programming language that makes it easy to build simple, reliable, and efficient software.
Multiple vulnerabilities have been discovered in Go. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Go users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-lang/go-1.20.10" # emerge --ask --oneshot --verbose @golang-rebuild
Multiple vulnerabilities have been discovered in Go, the worst of which could result in denial of service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-lang/go | * | < 1.18.6 | >= 1.18.6 |
Go is an open source programming language that makes it easy to build simple, reliable, and efficient software.
Multiple vulnerabilities have been discovered in Go. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Go users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-lang/go-1.18.6"
In addition, users using Portage 3.0.9 or later should ensure that packages with Go binaries have no vulnerable code statically linked into their binaries by rebuilding the @golang-rebuild set:
# emerge --ask --oneshot --verbose @golang-rebuild
Multiple vulnerabilities have been found in Go, the worst of which could result in remote code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-lang/go | * | < 1.18.5 | >= 1.18.5 |
Go is an open source programming language that makes it easy to build simple, reliable, and efficient software.
Multiple vulnerabilities have been discovered in Go. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Go users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-lang/go-1.18.5"
In addition, users using Portage 3.0.9 or later should ensure that packages with Go binaries have no vulnerable code statically linked into their binaries by rebuilding the @golang-rebuild set:
# emerge --ask --oneshot --verbose @golang-rebuild
Multiple vulnerabilities have been found in Go, the worst which could lead to the execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-lang/go | * | < 1.10.7 | >= 1.10.7 |
Go is an open source programming language that makes it easy to build simple, reliable, and efficient software.
Multiple vulnerabilities have been discovered in Go. Please review the CVE identifiers referenced below for details.
A remote attacker could cause arbitrary code execution by passing specially crafted Go packages the ‘go get -u’ command.
The remote attacker could also craft pathological inputs causing a CPU based Denial of Service condition via the crypto/x509 package.
There is no known workaround at this time.
All Go users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-lang/go-1.10.7"
A vulnerability in Go allows remote attackers to execute arbitrary commands.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-lang/go | * | < 1.10.1 | >= 1.10.1 |
Go is an open source programming language that makes it easy to build simple, reliable, and efficient software.
A vulnerability in Go was discovered which does not validate the import path of remote repositories.
Remote attackers, by enticing a user to import from a crafted website, could execute arbitrary commands.
There is no known workaround at this time.
All Go users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-lang/go-1.10.1"
A vulnerability in Go might allow remote attackers to execute arbitrary commands during source code build.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-lang/go | * | < 1.9.4 | >= 1.9.4 |
Go is an open source programming language that makes it easy to build simple, reliable, and efficient software.
A command injection flaw was discovered in the source code build phase because of the “go get” command, which does not block -fplugin= and -plugin arguments.
A remote attacker could entice a user to process a repository containing maliciously-crafted build instructions using “go get”, resulting in the execution of arbitrary code with the privileges of the process.
There is no known workaround at this time.
All Go users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-lang/go-1.9.4"
Multiple vulnerabilities have been found in Go, the worst of which may result in the execution of arbitrary commands.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-lang/go | * | < 1.9.1 | >= 1.9.1 |
Go is an open source programming language that makes it easy to build simple, reliable, and efficient software.
Multiple vulnerabilities have been discovered in Go. Please review the references below for details.
Remote attackers could execute arbitrary Go commands or conduct a man in the middle attack.
There is no known workaround at this time.
All Go users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-lang/go-1.9.1"