Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 580
Alerts This Week
Warning Icon 1 580

SUSE 15-SP3: SUSE-SU-2021:2398-1 Moderate: Go1.15 Security Issue

suse
Calendar Grey July 19, 2021
Dist Suse Esm H88
SUSE Security Announcement for go1.15 resolves a significant vulnerability. Comprehensive instructions and methods for installation included.
An update that solves one vulnerability and has one errata is now available

Summary

This update for go1.15 fixes the following issues: - go1.15.14 (released 2021-07-12) includes a security fix to the crypto/tls package, as well as bug fixes to the linker, and the net package. CVE-2021-34558 Refs bsc#1175132 go1.15 release tracking * bsc#1188229 go#47143 CVE-2021-34558 * go#47144 security: fix CVE-2021-34558 * go#47012 net: LookupMX behaviour broken * go#46994 net: TestCVE202133195 fails if /etc/resolv.conf specifies ndots larger than 3 * go#46768 syscall: TestGroupCleanupUserNamespace test failure on Fedora * go#46684 x/build/cmd/release: linux-armv6l release tests aren't passing * go#46656 runtime: deeply nested struct initialized with non-zero values - Fix extraneous trailing percent character %endif% in spec file. Patch Instructions:

Topics%20covered

Topics Covered

security advisory moderate security issue patch SUSE go1.15

References

#1175132 #1188229

Cross- CVE-2021-34558

CVSS scores:

CVE-2021-34558 (SUSE): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products:

SUSE Linux Enterprise Module for Development Tools 15-SP3

SUSE Linux Enterprise Module for Development Tools 15-SP2

https://www.suse.com/security/cve/CVE-2021-34558.html

https://bugzilla.suse.com/1175132

https://bugzilla.suse.com/1188229

Announcement ID: SUSE-SU-2021:2398-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate security issue patch SUSE go1.15

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.