Today’s Go security release fixes an issue involving PATH lookups in untrusted directories that can lead to remote execution during the go get command. We expect people to have questions about what exactly this means and whether they might have issues in their own programs. This post details the bug, the fixes we have applied, how to decide whether your own programs are vulnerable to similar problems, and what you can do if they are.
Go command & remot
The industry is abuzz about non-x86 processors recently, so we thought it would be worth a brief post about Go’s support for them. It has always been important to us for Go to be portable, not overfitting to any particular operating system or architecture. The initial open source release of Go included support for two operating systems (Linux and Mac OS X) and three architectures (64-bit x86, 32-bit x86, and 32-bit ARM). Over the years, we’ve added support for many mor
With the introduction of Go modules and the growth of the Go ecosystem, pkg.go.dev was launched in 2019 to provide a central place where developers can discover and evaluate Go packages and modules. Like godoc.org, pkg.go.dev serves Go documentation, but it also supports modules, better search functionality, and signals to help Go users to find the right packages. As we shared in January 2020, our goal is to eventually redirect traffic from godoc.org to the corresponding
Today we celebrate the eleventh birthday of the Go open source release. The parties we had for Go turning 10 seem like a distant memory. It’s been a tough year, but we’ve kept Go development moving forward and accumulated quite a few highlights. In November, we launched go.dev and pkg.go.dev shortly after Go’s 10th birthday. In February, the Go 1.14 release delivered the first officially “production-ready” implementation of Go modules, along with many performance improvem
Since launching pkg.go.dev, we’ve received a lot of great feedback on design and usability. In particular, it was clear that the way information was organized confused users when navigating the site. Today we’re excited to share a redesigned pkg.go.dev, which we hope will be clearer and more helpful. This blog post presents the highlights. For details, see Go issue 41585.
Consistent landing page for all paths The main change is that the pkg.go.dev/<pa
Proposals for Go 1.15
Announcing the 2019 Go Developer Survey