---
title: "#180: Two Security Vulnerabilities Fixed In Latest Go Updates"
publication: "Go Weekly"
issue: 180
published_at: "2017-10-05"
canonical_url: "https://golangweekly.com/issues/180"
---

Golang Weekly 180   . 

[Read this on the Web](https://golangweekly.com/issues/180) 

[Golang Weekly](https://golangweekly.com) Issue 180 — October 5, 2017     

Featured [Go 1.8.4 and Go 1.9.1 Released for Security Reasons](https://groups.google.com/d/msg/golang-nuts/sHfMg4gZNps/a-HDgDDDAAAJ?utm_source=golangweekly&utm_medium=email) The Go team recommend you upgrade if possible as two security vulnerabilities have been fixed, as explained here. Chris Broadfoot [Colly: A Web Scraping Framework for Go](https://github.com/asciimoo/colly?utm_source=golangweekly&utm_medium=email) It claims to be ‘lightning fast’ and has an elegant API for building your own crawlers, spiders or scrapers. [Usage examples](https://github.com/asciimoo/colly/tree/master/examples). Adam Tauber [Linux cloud hosting starting at 1GB of RAM for $5/mo](https://welcome.linode.com/go-weekly?utm_source=cooperpress&utm_medium=sponsored&utm_term=go&utm_campaign=go-weekly-primary) Get a Linode server up and running in seconds. Simply choose your plan, distro and location and you’re ready to deploy your server. Get $20 credit on a new account. Linode Cloud Hostingsponsored[![\](https://copm.s3.amazonaws.com/dcba6e0b.png)](https://welcome.linode.com/go-weekly?utm_source=cooperpress&utm_medium=sponsored&utm_term=go&utm_campaign=go-weekly-primary) [Matcha: Build iOS and Android Apps with Go](https://gomatcha.io/?utm_source=golangweekly&utm_medium=email) Matcha provides UI components in a way similar to React Native and exposes bindings to Objective-C and Java code. Kevin Dang [Create a GraphQL Server with Go and Google App Engine](https://outcrawl.com/graphql-server-go-google-app-engine/?utm_source=golangweekly&utm_medium=email) The tutorial implements a “simple social network” app using the graphql-go/graphql package. Tin Rabzelj [Your pprof Is Showing: Preventing Profiling Endpoint Abuse in Production](http://mmcloughlin.com/posts/your-pprof-is-showing?utm_source=golangweekly&utm_medium=email) How many pprof servers are open to the internet? Too many. Michael McLoughlin [So You Wanna 'Go' Fast?](https://www.youtube.com/watch?v=DJ4d_PZ6Gns&utm_source=golangweekly&utm_medium=email) video A 35-minute dive into potential low-level performance optimizations by a ‘recovering Go hater.’ Tyler Treat [Important Interfaces Every Go Developer Should Know](https://www.writeingo.com/blog/important-go-interfaces/?utm_source=golangweekly&utm_medium=email#golang) It’s more than just the errors, Reader, and Writer interfaces. Radosław Załuska Jobs [Netflix Senior Software Engineer — Open Connect Edge Accelerator](https://jobs.netflix.com/jobs/865194) Join a small team working on an exciting new project around API acceleration on top of the Netflix's CDN (Open Connect). Netflix [Platform Engineer [API, Golang\]](https://beme.com/jobs/platform-engineer.html) Beme (NYC) is looking for an engineer to join us in creating the next generation of apps for newshounds. Small Team. Big Impact. Beme [One application, thousands of dev job opportunities](https://www.vettery.com/?utm_medium=cooper-golangweekly=ad-1215=newsletter=grouped=tech) Stop applying and start interviewing. Try Vettery to get job offers from top tech companies sent right to your inbox. Vettery In Brief [dotGo: The European Go Conference (Paris, November 6)](http://www.dotgo.eu/?utm_source=golangweekly&utm_medium=email) news The full line-up of speakers for this year’s conference has now been announced. dotConferences [Announcing Grade: A Tool to Track Your Go Benchmarks in InfluxDB](https://www.influxdata.com/blog/announcing-grade-a-tool-to-track-your-go-benchmarks-in-influxdb?utm_source=golangweekly&utm_medium=email) news InfluxDatasponsored [A Visual How-To Guide to Go Variables](https://blog.learngoprogramming.com/learn-go-lang-variables-visual-tutorial-and-ebook-9a061d29babe?utm_source=golangweekly&utm_medium=email) tutorial A detailed post on everything you ever wanted to know about variables. Inanc Gumus [An Introduction to Statistics With Gonum](https://sbinet.github.io/posts/2017-10-04-intro-to-stats-with-gonum/?utm_source=golangweekly&utm_medium=email) tutorial Sebastien Binet [Efficient Bit Manipulation in Go 1.9](http://herman.asia/bit-manipulation-in-go-1-9?utm_source=golangweekly&utm_medium=email) tutorial Using the `maths/bits` package. Herman Schaaf [A Small Memory Optimization for Log-Heavy Applications](http://agniva.me/go/2017/10/03/improving-log-write.html?utm_source=golangweekly&utm_medium=email) tutorial Agniva De Sarker [Elegant Code and Go: Refactoring for Readability](https://scene-si.org/2017/10/04/elegant-code-and-go/?utm_source=golangweekly&utm_medium=email) tutorial Tit Petric [Building High Performance APIs in Using gRPC](http://www.agiratech.com/building-high-performance-apis-go-grpc/?utm_source=golangweekly&utm_medium=email) tutorial Agira Technologies [The State of Go 1.9](https://www.youtube.com/watch?v=vFJkH4qDjJ0&utm_source=golangweekly&utm_medium=email) video Francesc Campoy [Ways To Do Things: Patterns for Designing and Using Actors in Go](https://www.youtube.com/watch?v=LHe1Cb_Ud_M&utm_source=golangweekly&utm_medium=email) video Peter Bourgon [Write Less Code, Use More Tools](https://circleci.com/blog/write-less-code-use-more-tools/?utm_source=golangweekly&utm_medium=email&utm_campaign=october&utm_content=go-newsletter) story Our outrageous decision to orchestrate Nomad with Kubernetes. CircleCIsponsored [AtmanOS: Build Go Programs That Run Directly on the Xen Hypervisor](https://github.com/atmanos/atmanos?utm_source=golangweekly&utm_medium=email) tools AtmanOS [cam2ip: Turn Any Webcam into an IP Camera](https://github.com/gen2brain/cam2ip?utm_source=golangweekly&utm_medium=email) code Milan Nikolic [go-base: Go RESTful API Boilerplate with JWT Auth Backed by Postgres](https://github.com/dhax/go-base?utm_source=golangweekly&utm_medium=email) code dhax [Gophersat: A SAT Solver in Go](https://github.com/crillab/gophersat?utm_source=golangweekly&utm_medium=email) code Centre de Recherche en Informatique de Lens [DCLua: A Lua 5.3 VM and Compiler Written in Go](https://github.com/milochristiansen/lua?utm_source=golangweekly&utm_medium=email) code Intended to allow easy embedding into Go programs. Milo Christiansen    

Golang Weekly is curated by [Peter Cooper](https://twitter.com/peterc) and [Glenn Goodrich](https://twitter.com/ruprict) [Read this issue on the Web](https://golangweekly.com/issues/180) [See our archives](https://golangweekly.com/issues) [Change your email address](*|UPDATE_PROFILE|*)  [Stop getting this newsletter](*|UNSUB|*)  

Published by [Cooperpress](https://cooperpress.com/)
Fairfield Enterprise Centre, Lincoln Way, Louth, LN11 0LS, UK