Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2021:4169-1

Опубликовано: 23 дек. 2021
Источник: suse-cvrf

Описание

Security update for go1.16

This update for go1.16 fixes the following issues:

Updated to upstream version 1.16.12 to include security fixes to the compiler, syscall, runtime, the net/http, net/http/httptest, and time packages (bsc#1182345)

  • CVE-2021-44717: syscall: don't close fd 0 on ForkExec error (bsc#1193598).
  • CVE-2021-44716: net/http: limit growth of header canonicalization cache (bsc#1193597).

Список пакетов

Container bci/golang:1.16
go1.16-1.16.12-1.37.2
Container trento/trento-runner:latest
go1.16-1.16.12-1.37.2
SUSE Enterprise Storage 7
go1.16-1.16.12-1.37.2
go1.16-doc-1.16.12-1.37.2
go1.16-race-1.16.12-1.37.2
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS
go1.16-1.16.12-1.37.2
go1.16-doc-1.16.12-1.37.2
go1.16-race-1.16.12-1.37.2
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS
go1.16-1.16.12-1.37.2
go1.16-doc-1.16.12-1.37.2
go1.16-race-1.16.12-1.37.2
SUSE Linux Enterprise Module for Development Tools 15 SP2
go1.16-1.16.12-1.37.2
go1.16-doc-1.16.12-1.37.2
go1.16-race-1.16.12-1.37.2
SUSE Linux Enterprise Module for Development Tools 15 SP3
go1.16-1.16.12-1.37.2
go1.16-doc-1.16.12-1.37.2
go1.16-race-1.16.12-1.37.2
SUSE Linux Enterprise Server 15 SP2-BCL
go1.16-1.16.12-1.37.2
go1.16-doc-1.16.12-1.37.2
go1.16-race-1.16.12-1.37.2
SUSE Linux Enterprise Server 15 SP2-LTSS
go1.16-1.16.12-1.37.2
go1.16-doc-1.16.12-1.37.2
go1.16-race-1.16.12-1.37.2
SUSE Linux Enterprise Server for SAP Applications 15 SP2
go1.16-1.16.12-1.37.2
go1.16-doc-1.16.12-1.37.2
go1.16-race-1.16.12-1.37.2
SUSE Manager Proxy 4.1
go1.16-1.16.12-1.37.2
go1.16-doc-1.16.12-1.37.2
go1.16-race-1.16.12-1.37.2
SUSE Manager Retail Branch Server 4.1
go1.16-1.16.12-1.37.2
go1.16-doc-1.16.12-1.37.2
go1.16-race-1.16.12-1.37.2
SUSE Manager Server 4.1
go1.16-1.16.12-1.37.2
go1.16-doc-1.16.12-1.37.2
go1.16-race-1.16.12-1.37.2

Ссылки

Описание

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

Затронутые продукты
Container bci/golang:1.16:go1.16-1.16.12-1.37.2
Container trento/trento-runner:latest:go1.16-1.16.12-1.37.2
SUSE Enterprise Storage 7:go1.16-1.16.12-1.37.2
SUSE Enterprise Storage 7:go1.16-doc-1.16.12-1.37.2
Ссылки

Описание

Go before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file or unintended network connection as a consequence of erroneous closing of file descriptor 0 after file-descriptor exhaustion.

Затронутые продукты
Container bci/golang:1.16:go1.16-1.16.12-1.37.2
Container trento/trento-runner:latest:go1.16-1.16.12-1.37.2
SUSE Enterprise Storage 7:go1.16-1.16.12-1.37.2
SUSE Enterprise Storage 7:go1.16-doc-1.16.12-1.37.2
Ссылки