Описание
Security update for go1.21
This update for go1.21 fixes the following issues:
Update to go1.21.10:
- CVE-2024-24787: cmd/go: arbitrary code execution during build on darwin (bsc#1224017)
- net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0
Список пакетов
SUSE Linux Enterprise Software Development Kit 12 SP5
go1.21-1.21.10-1.33.1
go1.21-doc-1.21.10-1.33.1
Ссылки
- Link for SUSE-SU-2024:1574-1
- E-Mail link for SUSE-SU-2024:1574-1
- SUSE Security Ratings
- SUSE Bug 1212475
- SUSE Bug 1224017
- SUSE CVE CVE-2024-24787 page
Описание
On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of the -lto_library flag in a "#cgo LDFLAGS" directive.
Затронутые продукты
SUSE Linux Enterprise Software Development Kit 12 SP5:go1.21-1.21.10-1.33.1
SUSE Linux Enterprise Software Development Kit 12 SP5:go1.21-doc-1.21.10-1.33.1
Ссылки
- CVE-2024-24787
- SUSE Bug 1224017