[Web Feed] Today???s Go security release fixes an issue involving PATH lookups in untruste...

..d directories that can lead to remote execution during the go



Today’s 
golang.org/s/go-security-release-jan-2021: Go security release fixes an issue involving PATH lookups in untrusted directories that can lead to remote execution during the 


go


 


get


 command. We expect people to have questions about what exactly this means and whether they might have issues in their own programs. This post details the bug, the fixes we have applied, how to decide whether your own programs are vulnerable to similar problems, and what you can do if they are.




Link 1


Command PATH security in Go - The Go Blog: https://blog.golang.org/path-security