SUSE-SU-2019:2940-1

Source
https://www.suse.com/support/update/announcement/2019/suse-su-20192940-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:2940-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2019:2940-1
Related
Published
2019-11-11T12:06:36Z
Modified
2019-11-11T12:06:36Z
Summary
Security update for go1.12
Details

This update for go1.12 fixes the following issues:

Security issues fixed:

  • CVE-2019-16276: Fixed the handling of invalid HTTP headers, which had allowed request smuggling (bsc#1152082).
  • CVE-2019-17596: Fixed a panic in dsa.Verify caused by invalid public keys (bsc#1154402).

Non-security issue fixed:

  • Go was updated to version 1.12.12 (bsc#1141689).
References

Affected packages