Search for packages
Package details: pkg:alpm/archlinux/go@2:1.15.7-1
purl pkg:alpm/archlinux/go@2:1.15.7-1
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-8dup-t5n7-aaas In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs, related to an underflow of the lowest limb during the final complete reduction in the P-224 field. CVE-2021-3114
VCID-npn5-x97a-aaad Go before 1.14.14 and 1.15.x before 1.15.7 on Windows is vulnerable to Command Injection and remote code execution when using the "go get" command to fetch modules that make use of cgo (for example, cgo can execute a gcc program from an untrusted download). CVE-2021-3115

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T07:46:45.711101+00:00 Arch Linux Importer Fixing VCID-8dup-t5n7-aaas https://security.archlinux.org/AVG-1481 36.0.0
2025-03-28T07:46:45.678077+00:00 Arch Linux Importer Fixing VCID-npn5-x97a-aaad https://security.archlinux.org/AVG-1481 36.0.0
2024-09-18T02:02:06.623450+00:00 Arch Linux Importer Fixing VCID-8dup-t5n7-aaas https://security.archlinux.org/AVG-1481 34.0.1
2024-09-18T02:02:06.595283+00:00 Arch Linux Importer Fixing VCID-npn5-x97a-aaad https://security.archlinux.org/AVG-1481 34.0.1
2024-01-03T22:28:09.100307+00:00 Arch Linux Importer Fixing VCID-8dup-t5n7-aaas https://security.archlinux.org/AVG-1481 34.0.0rc1
2024-01-03T22:28:09.075928+00:00 Arch Linux Importer Fixing VCID-npn5-x97a-aaad https://security.archlinux.org/AVG-1481 34.0.0rc1