Oval Definition:oval:org.opensuse.security:def:68776
Revision Date:2020-12-01Version:1
Title:Security update for go1.11 (Moderate)
Description:

This update for go1.11 fixes the following issues:

Security issues fixed:

- CVE-2019-9512: Fixed HTTP/2 flood using PING frames that results in unbounded memory growth (bsc#1146111). - CVE-2019-9514: Fixed HTTP/2 implementation that is vulnerable to a reset flood, potentially leading to a denial of service (bsc#1146115). - CVE-2019-14809: Fixed malformed hosts in URLs that leads to authorization bypass (bsc#1146123).

Bugfixes:

- Update to go version 1.11.13 (bsc#1141688).
Family:unixClass:patch
Status:Reference(s):1141688
1146111
1146115
1146123
1159922
1159923
1159924
1159927
CVE-2019-11045
CVE-2019-11046
CVE-2019-11047
CVE-2019-11050
CVE-2019-14809
CVE-2019-9512
CVE-2019-9514
SUSE-SU-2019:2213-1
SUSE-SU-2020:0101-1
Platform(s):SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed
  • AND Package Information
  • go1.11-1.11.13-1.18 is installed
  • OR go1.11-doc-1.11.13-1.18 is installed
  • OR go1.11-race-1.11.13-1.18 is installed
    • BACK