Oval Definition:	oval:org.opensuse.security:def:74717
Revision Date: 2021-06-28 Version: 1 Title: Security update for go1.16 (Important) Description: This update for go1.16 fixes the following issues: Update to 1.16.5. Includes these security fixes - CVE-2021-33195: net: Lookup functions may return invalid host names (bsc#1187443). - CVE-2021-33196: archive/zip: malformed archive may cause panic or memory exhaustion (bsc#1186622). - CVE-2021-33197: net/http/httputil: ReverseProxy forwards Connection headers if first one is empty (bsc#1187444) - CVE-2021-33198: math/big: (*Rat).SetString with '1.770p02041010010011001001' crashes with 'makeslice: len out of range' (bsc#1187445). Family: unix Class: patch Status: Reference(s): 1155346 1157775 1158101 1158194 1158809 1182345 1186622 1187443 1187444 1187445 CVE-2019-1551 CVE-2019-19451 CVE-2021-33195 CVE-2021-33196 CVE-2021-33197 CVE-2021-33198 openSUSE-SU-2020:0021-1 openSUSE-SU-2020:0062-1 SUSE-SU-2021:2186-1 Platform(s): openSUSE Leap 15.1 SUSE Linux Enterprise Desktop 15 SP3 SUSE Linux Enterprise High Performance Computing 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Server 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 Product(s): Definition Synopsis openSUSE Leap 15.1 is installed AND Package Information dia-0.97.3-lp151.4.3 is installed OR dia-lang-0.97.3-lp151.4.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Development Tools 15 SP3 is installed AND Package Information go1.16-1.16.5-1.17.1 is installed OR go1.16-doc-1.16.5-1.17.1 is installed OR go1.16-race-1.16.5-1.17.1 is installed
BACK