openSUSE Leap 15.3 & 15.4: 2022:0724-1 Important: Go1.16 Memory Issues

This update for go1.16 fixes the following issues:

- CVE-2022-23806: Fixed incorrect returned value in crypto/elliptic

IsOnCurve (bsc#1195838).

- CVE-2022-23772: Fixed overflow in Rat.SetString in math/big can lead to

uncontrolled memory consumption (bsc#1195835).

- CVE-2022-23773: Fixed incorrect access control in cmd/go (bsc#1195834).

The following non-security bugs were fixed:

- go#50977 crypto/elliptic: IsOnCurve returns true for invalid field

elements

- go#50700 math/big: Rat.SetString may consume large amount of RAM and

crash

- go#50686 cmd/go: do not treat branches with semantic-version names as

releases

- go#50866 cmd/compile: incorrect use of CMN on arm64

- go#50832 runtime/race: NoRaceMutexPureHappensBefore failures

- go#50811 cmd/go: remove bitbucket VCS probing

- go#50780 runtime: incorrect frame information in traceback traversal may

hang the process.

- go#50721 debug/pe: reading debug_info section...