Search for packages
Package details: pkg:alpm/archlinux/go@2:1.17.3-1
purl pkg:alpm/archlinux/go@2:1.17.3-1
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-kvq4-bw5a-aaam Go before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted ZIP archive containing an invalid name or an empty filename field. CVE-2021-41772
VCID-nphv-er38-aaae ImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17.3 Accesses a Memory Location After the End of a Buffer, aka an out-of-bounds slice situation. CVE-2021-41771

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T07:47:02.534991+00:00 Arch Linux Importer Fixing VCID-nphv-er38-aaae https://security.archlinux.org/AVG-2527 36.0.0
2025-03-28T07:47:02.516345+00:00 Arch Linux Importer Fixing VCID-kvq4-bw5a-aaam https://security.archlinux.org/AVG-2527 36.0.0
2024-09-18T02:02:25.220980+00:00 Arch Linux Importer Fixing VCID-nphv-er38-aaae https://security.archlinux.org/AVG-2527 34.0.1
2024-09-18T02:02:25.198577+00:00 Arch Linux Importer Fixing VCID-kvq4-bw5a-aaam https://security.archlinux.org/AVG-2527 34.0.1
2024-01-03T22:28:26.446194+00:00 Arch Linux Importer Fixing VCID-nphv-er38-aaae https://security.archlinux.org/AVG-2527 34.0.0rc1
2024-01-03T22:28:26.422037+00:00 Arch Linux Importer Fixing VCID-kvq4-bw5a-aaam https://security.archlinux.org/AVG-2527 34.0.0rc1