Security update for go1.15
This update for go1.15 fixes the following issues:
Update to 1.15.13.
Includes these security fixes
- CVE-2021-33195: net: Lookup functions may return invalid host names (bsc#1187443).
- CVE-2021-33196: archive/zip: malformed archive may cause panic or memory exhaustion (bsc#1186622).
- CVE-2021-33197: net/http/httputil: ReverseProxy forwards Connection headers if first one is empty (bsc#1187444)
- CVE-2021-33198: math/big: (*Rat).SetString with "1.770p02041010010011001001" crashes with "makeslice: len out of range" (bsc#1187445).
This update was imported from the SUSE:SLE-15:Update update project.
-
Submitted by
Jeff Kowalczyk (jfkw)
Fixed bugs
bnc#1175132
go1.15 release tracking
bnc#1187443
VUL-0: CVE-2021-33195: go1.16,go1.15: go: net: Lookup functions may return invalid host names
bnc#1187445
VUL-0: CVE-2021-33198: go1.16,go1.15: go: math/big.Rat SetString and UnmarshalText panic with very large exponents
bnc#1187444
VUL-0: CVE-2021-33197: go1.16,go1.15: go: net/http/httputil: ReverseProxy forwards Connection headers if first one is empty
bnc#1186622
VUL-0: CVE-2021-33196: go1.14,go1.15,go1.16: Malformed archive may cause panic or memory exhaustion
