Dear maintainer(s),
The Debian LTS team would like to fix the security issues which are
currently open in the Wheezy version of golang:
https://security-tracker.debian.org/tracker/CVE-2018-6574
Would you like to take care of this yourself?
If yes, please follow the workflow we have defined
On 2017-10-24 15:44:18, Antoine Beaupré wrote:
> Hi,
>
> After further analysis for the issues affecting golang in Wheezy, I have
> concluded that it is not necessary to perform updates.
>
> CVE-2017-15041 concerns only the "go get" command, and only malicious
> Subversion repositories which can
Hi,
After further analysis for the issues affecting golang in Wheezy, I have
concluded that it is not necessary to perform updates.
CVE-2017-15041 concerns only the "go get" command, and only malicious
Subversion repositories which can *then* chain into malicious git
repositories. But then "go
Dear maintainers,
The Debian LTS team would like to fix the security issues which are
currently open in the Wheezy version of golang:
https://security-tracker.debian.org/tracker/CVE-2017-15041
https://security-tracker.debian.org/tracker/CVE-2017-15042
Would you like to take care of this