Nacionalni CERT

Sigurnosni nedostatak programskog paketa golang

<p>--------------------------------------------------------------------------------<br />Fedora Update Notification<br />FEDORA-2017-278f46fcd6<br />2017-06-16 13:14:53.496718<br />--------------------------------------------------------------------------------<br /><br />Name : golang<br />Product : Fedora 25<br />Version : 1.7.6<br />Release : 1.fc25<br />URL : http://golang.org/<br />Summary : The Go Programming Language<br />Description :<br />The Go Programming Language.<br /><br />--------------------------------------------------------------------------------<br />Update Information:<br /><br />* Bump to 1.7.6 * Security fix for CVE-2017-8932<br />--------------------------------------------------------------------------------<br />References:<br /><br /> [ 1 ] Bug #1455191 - CVE-2017-8932 golang: Elliptic curvers carry propagation issue in x86-64 P-256 [fedora-all]<br /> https://bugzilla.redhat.com/show_bug.cgi?id=1455191<br />--------------------------------------------------------------------------------<br /><br />This update can be installed with the "dnf" update program. Use<br />su -c 'dnf upgrade golang' at the command line.<br />For more information, refer to the dnf documentation available at<br />http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-lab... /><br />All packages are signed with the Fedora Project GPG key. More details on the<br />GPG keys used by the Fedora Project can be found at<br />https://fedoraproject.org/keys<br />--------------------------------------------------------------------------------<br />_______________________________________________<br />package-announce mailing list -- package-announce@lists.fedoraproject.org<br />To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org</p>
Otkriven je sigurnosni nedostatak u programskom paketu golang za operacijski sustav Fedora. Otkriveni nedostatak potencijalnim napadačima omogućuje otkrivanje osjetljivih informacija. Savjetuje se ažuriranje izdanim zakrpama.