File _patchinfo of Package patchinfo.6786

<patchinfo incident="6786">
  <issue id="1080006" tracker="bnc">VUL-0: CVE-2018-6574: go: "go get" allows for remote command execution during source code build</issue>
  <issue id="1082409" tracker="bnc">Major regression in usability of go package</issue>
  <issue id="2018-6574" tracker="cve" />
  <category>security</category>
  <rating>moderate</rating>
  <packager>jordimassaguerpla</packager>
  <description>This update for go1.9 fixes the following issues:

Security issues fix in version 1.9.4:

- CVE-2018-6574: "go get" allows for remote command execution during source code build (bsc#1080006).

Bug fixes:

- bsc#1082409: Review dependencies (requires, recommends and supports).
</description>
  <summary>Security update for go1.9</summary>
</patchinfo>
openSUSE Build Service is sponsored by