[openSUSE-SU-2021:1079-1] Security update for go1.15

Severity Moderate
Affected Packages 3
CVEs 1

Security update for go1.15

This update for go1.15 fixes the following issues:

  • go1.15.14 (released 2021-07-12) includes a security fix to the
    crypto/tls package, as well as bug fixes to the linker, and the
    net package.
    CVE-2021-34558
    Refs bsc#1175132 go1.15 release tracking

    • bsc#1188229 go#47143 CVE-2021-34558
    • go#47144 security: fix CVE-2021-34558
    • go#47012 net: LookupMX behaviour broken
    • go#46994 net: TestCVE202133195 fails if /etc/resolv.conf specifies ndots larger than 3
    • go#46768 syscall: TestGroupCleanupUserNamespace test failure on Fedora
    • go#46684 x/build/cmd/release: linux-armv6l release tests aren't passing
    • go#46656 runtime: deeply nested struct initialized with non-zero values
  • Fix extraneous trailing percent character %endif% in spec file.

This update was imported from the SUSE:SLE-15:Update update project.

Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/opensuse/go1.15?arch=x86_64&distro=opensuse-leap-15.2 opensuse go1.15 < 1.15.14-lp152.23.1 opensuse-leap-15.2 x86_64
Affected pkg:rpm/opensuse/go1.15-race?arch=x86_64&distro=opensuse-leap-15.2 opensuse go1.15-race < 1.15.14-lp152.23.1 opensuse-leap-15.2 x86_64
Affected pkg:rpm/opensuse/go1.15-doc?arch=x86_64&distro=opensuse-leap-15.2 opensuse go1.15-doc < 1.15.14-lp152.23.1 opensuse-leap-15.2 x86_64
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date
Loading...