Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2021:1079-1

Опубликовано: 22 июл. 2021
Источник: suse-cvrf

Описание

Security update for go1.15

This update for go1.15 fixes the following issues:

  • go1.15.14 (released 2021-07-12) includes a security fix to the crypto/tls package, as well as bug fixes to the linker, and the net package. CVE-2021-34558 Refs bsc#1175132 go1.15 release tracking

    • bsc#1188229 go#47143 CVE-2021-34558
    • go#47144 security: fix CVE-2021-34558
    • go#47012 net: LookupMX behaviour broken
    • go#46994 net: TestCVE202133195 fails if /etc/resolv.conf specifies ndots larger than 3
    • go#46768 syscall: TestGroupCleanupUserNamespace test failure on Fedora
    • go#46684 x/build/cmd/release: linux-armv6l release tests aren't passing
    • go#46656 runtime: deeply nested struct initialized with non-zero values

  • Fix extraneous trailing percent character %endif% in spec file.

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.2
go1.15-1.15.14-lp152.23.1
go1.15-doc-1.15.14-lp152.23.1
go1.15-race-1.15.14-lp152.23.1

Ссылки

Описание

The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic.

Затронутые продукты
openSUSE Leap 15.2:go1.15-1.15.14-lp152.23.1
openSUSE Leap 15.2:go1.15-doc-1.15.14-lp152.23.1
openSUSE Leap 15.2:go1.15-race-1.15.14-lp152.23.1
Ссылки