{"action":"closed","issue":{"url":"https://api.github.com/repos/NixOS/nixpkgs/issues/12318","labels_url":"https://api.github.com/repos/NixOS/nixpkgs/issues/12318/labels{/name}","comments_url":"https://api.github.com/repos/NixOS/nixpkgs/issues/12318/comments","events_url":"https://api.github.com/repos/NixOS/nixpkgs/issues/12318/events","html_url":"https://github.com/NixOS/nixpkgs/issues/12318","id":125888244,"number":12318,"title":"Upcoming security update for Go 1.5","user":{"login":"lfam","id":6568228,"avatar_url":"https://avatars.githubusercontent.com/u/6568228?v=3","gravatar_id":"","url":"https://api.github.com/users/lfam","html_url":"https://github.com/lfam","followers_url":"https://api.github.com/users/lfam/followers","following_url":"https://api.github.com/users/lfam/following{/other_user}","gists_url":"https://api.github.com/users/lfam/gists{/gist_id}","starred_url":"https://api.github.com/users/lfam/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/lfam/subscriptions","organizations_url":"https://api.github.com/users/lfam/orgs","repos_url":"https://api.github.com/users/lfam/repos","events_url":"https://api.github.com/users/lfam/events{/privacy}","received_events_url":"https://api.github.com/users/lfam/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/NixOS/nixpkgs/labels/1.severity:%20security","name":"1.severity: security","color":"e11d21"}],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2016-01-11T07:38:03Z","updated_at":"2016-01-14T19:09:11Z","closed_at":"2016-01-14T19:09:10Z","body":"The golang people have announced they will be issuing Go 1.5.3 on Wednesday\r\nJanuary 13 [0] in order to fix a bug in the math/big library. They request that\r\nall programs compiled with vulnerable versions of the library be recompiled [1]:\r\n\r\n> We will also announce and request that all Go programs using the math/big\r\n> package that were compiled with version 1.5, 1.5.1, or 1.5.2 be recompiled\r\n> with  1.5.3 (when released) due to the static linking nature of the Go\r\n> toolchain.\r\n\r\n[0]\r\nhttps://groups.google.com/forum/#!topic/golang-nuts/lXeB-v400ZM\r\n\r\n[1]\r\nhttp://www.openwall.com/lists/oss-security/2015/12/21/6\r\n"}}