openSUSE Security Update: Security update for go1.16 ______________________________________________________________________________
Announcement ID: openSUSE-SU-2021:1342-1 Rating: important References: #1182345 #1190589 Cross-References: CVE-2021-39293 CVSS scores: CVE-2021-39293 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________
An update that solves one vulnerability and has one errata is now available.
This update for go1.16 fixes the following issues:
- Update to go 1.16.8 - CVE-2021-39293: Fixed a buffer overflow issue in preallocation check that can cause OOM panic. (bas#)
This update was imported from the SUSE:SLE-15:Update update project.
To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Leap 15.2:
zypper in -t patch openSUSE-2021-1342=1
- openSUSE Leap 15.2 (x86_64):
go1.16-1.16.8-lp152.11.1 go1.16-doc-1.16.8-lp152.11.1 go1.16-race-1.16.8-lp152.11.1