Oval Definition:oval:org.opensuse.security:def:74718
Revision Date:2021-06-30Version:1
Title:Security update for go1.15 (Important)
Description:

This update for go1.15 fixes the following issues:

Update to 1.15.13. Includes these security fixes

- CVE-2021-33195: net: Lookup functions may return invalid host names (bsc#1187443). - CVE-2021-33196: archive/zip: malformed archive may cause panic or memory exhaustion (bsc#1186622). - CVE-2021-33197: net/http/httputil: ReverseProxy forwards Connection headers if first one is empty (bsc#1187444) - CVE-2021-33198: math/big: (*Rat).SetString with '1.770p02041010010011001001' crashes with 'makeslice: len out of range' (bsc#1187445).
Family:unixClass:patch
Status:Reference(s):1165184
1167864
1171247
1175132
1186622
1187443
1187444
1187445
CVE-2019-10214
CVE-2020-10696
CVE-2020-6464
CVE-2020-6831
CVE-2021-33195
CVE-2021-33196
CVE-2021-33197
CVE-2021-33198
openSUSE-SU-2020:0620-1
SUSE-SU-2021:2214-1
Platform(s):openSUSE Leap 15.1
SUSE Linux Enterprise Desktop 15 SP3
SUSE Linux Enterprise High Performance Computing 15 SP3
SUSE Linux Enterprise Module for Development Tools 15 SP3
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise Server for SAP Applications 15 SP3
SUSE Manager Proxy 4.2
SUSE Manager Server 4.2
Product(s):
Definition Synopsis
  • openSUSE Leap 15.1 is installed
  • AND buildah-1.17.0-lp151.2.6 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Development Tools 15 SP3 is installed
  • AND Package Information
  • go1.15-1.15.13-1.33.1 is installed
  • OR go1.15-doc-1.15.13-1.33.1 is installed
  • OR go1.15-race-1.15.13-1.33.1 is installed
  • BACK