Oval Definition:oval:org.opensuse.security:def:109992
Revision Date:2019-09-14Version:1
Title:Security update for go1.12 (Moderate)
Description:

This update for go1.12 fixes the following issues:

Security issues fixed:

- CVE-2019-9512: Fixed HTTP/2 flood using PING frames that results in unbounded memory growth (bsc#1146111). - CVE-2019-9514: Fixed HTTP/2 implementation that is vulnerable to a reset flood, potentially leading to a denial of service (bsc#1146115). - CVE-2019-14809: Fixed malformed hosts in URLs that leads to authorization bypass (bsc#1146123).

Bugfixes:

- Update to go version 1.12.9 (bsc#1141689). - Adding Web Assembly stuff from misc/wasm (bsc#1139210).

This update was imported from the SUSE:SLE-15:Update update project.
Family:unixClass:patch
Status:Reference(s):1139210
1141689
1146111
1146115
1146123
CVE-2019-14809
CVE-2019-9512
CVE-2019-9514
openSUSE-SU-2019:2130-1
Platform(s):openSUSE Leap 15.1
Product(s):
Definition Synopsis
  • openSUSE Leap 15.1 is installed
  • AND Package Information
  • go1.12-1.12.9-lp151.2.21.1 is installed
  • OR go1.12-doc-1.12.9-lp151.2.21.1 is installed
  • OR go1.12-race-1.12.9-lp151.2.21.1 is installed
  • BACK