crítica
openSUSE-SU-2019:2072-1
Security update for go1.11
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for go1.11 fixes the following issues: Security issues fixed: - CVE-2019-9512: Fixed HTTP/2 flood using PING frames that results in unbounded memory growth (bsc#1146111). - CVE-2019-9514: Fixed HTTP/2 implementation that is vulnerable to a reset flood, potentially leading to a denial of service (bsc#1146115). - CVE-2019-14809: Fixed malformed hosts in URLs that leads to authorization bypass (bsc#1146123). Bugfixes: - Update to go version 1.11.13 (bsc#1141688). This update was imported from the SUSE:SLE-15:Update update project.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| openSUSE Leap 15.0 | go1.11, go1.11-doc, go1.11-race | 1.11.13-lp151.2.9.1 |
| openSUSE Leap 15.1 | go1.11, go1.11-doc, go1.11-race | 1.11.13-lp151.2.9.1 |
Mostrar las 6 entradas de 2 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| openSUSE Leap 15.0 | go1.11 | 1.11.13-lp151.2.9.1 |
| openSUSE Leap 15.0 | go1.11-doc | 1.11.13-lp151.2.9.1 |
| openSUSE Leap 15.0 | go1.11-race | 1.11.13-lp151.2.9.1 |
| openSUSE Leap 15.1 | go1.11 | 1.11.13-lp151.2.9.1 |
| openSUSE Leap 15.1 | go1.11-doc | 1.11.13-lp151.2.9.1 |
| openSUSE Leap 15.1 | go1.11-race | 1.11.13-lp151.2.9.1 |
Referencias
- https://bugzilla.suse.com/1141688
- https://bugzilla.suse.com/1146111
- https://bugzilla.suse.com/1146115
- https://bugzilla.suse.com/1146123
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BI24YEOJ5PH7KNJKSQBX7VWR2MF4QCUT/#BI24YEOJ5PH7KNJKSQBX7VWR2MF4QCUT
- https://www.suse.com/security/cve/CVE-2019-14809/
- https://www.suse.com/security/cve/CVE-2019-9512/
- https://www.suse.com/security/cve/CVE-2019-9514/