Skip to content

cmd/go: arbitrary code execution during “go get” or “go get -d” [Go 1.9] #22131

New issue
New issue
Closed
Closed
cmd/go: arbitrary code execution during “go get” or “go get -d” [Go 1.9]#22131
Labels
CherryPickApprovedUsed during the release process for point releasesFrozenDueToAgeSecurity
Milestone
Go1.9.1
@rsc

Description

@rsc
rsc
opened on Oct 4, 2017

See #22125 for details.

Fixed in Go 1.9.1 by CL 68022 (bc907974a35a).

Metadata

Metadata

Assignees

No one assigned

    Labels

    CherryPickApprovedUsed during the release process for point releasesFrozenDueToAgeSecurity

    Type

    No type

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions