Kutha kutsata zofooka m'ma module awonjezedwa ku Go toolkit

Chida cha chinenero cha pulogalamu ya Go chimaphatikizapo kutha kutsata zovuta m'malaibulale. Kuti muwone ma projekiti anu kukhalapo kwa ma module omwe ali ndi zovuta zosalongosoka pakudalira kwawo, ntchito ya "govulncheck" ikufunsidwa, yomwe imasanthula maziko a projekiti ndikuwonetsa lipoti la mwayi wopeza ntchito zomwe zili pachiwopsezo. Kuphatikiza apo, phukusi la vulncheck lakonzedwa, lomwe limapereka API yoyika macheke muma projekiti osiyanasiyana ndi zofunikira.

Chekecho chimachitika pogwiritsa ntchito nkhokwe yachiwopsezo yopangidwa mwapadera, yomwe imayang'aniridwa ndi Go Security Team. Dongosolo lankhokwe lili ndi zambiri zokhudzana ndi zovuta zomwe zimadziwika m'magawo omwe amafalitsidwa ndi anthu onse muchilankhulo cha Go. Deta imasonkhanitsidwa kuchokera kuzinthu zosiyanasiyana, kuphatikizapo malipoti a CVE ndi GHSA (GitHub Advisory Database), komanso mauthenga otumizidwa ndi osamalira phukusi. Kuti mupemphe zambiri kuchokera ku database, laibulale, Web API ndi mawonekedwe apaintaneti amaperekedwa.

Source: opennet.ru

Kuwonjezera ndemanga