Security update for go1.12
This update for go1.12 fixes the following issues: Security issues fixed: - CVE-2019-9512: Fixed HTTP/2 flood using PING frames that results in unbounded memory growth. (bsc#1146111) - CVE-2019-9514: Fixed HTTP/2 implementation is vulnerable to a reset flood, potentially leading to a denial of service. (bsc#1146115) - CVE-2019-14809: Fixed authorization bypass due to malformed hosts in URLs. (bsc#1146123)
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for go1.12 fixes the following issues: Security issues fixed: - CVE-2019-9512: Fixed HTTP/2 flood using PING frames that results in unbounded memory growth. (bsc#1146111) - CVE-2019-9514: Fixed HTTP/2 implementation is vulnerable to a reset flood, potentially leading to a denial of service. (bsc#1146115) - CVE-2019-14809: Fixed authorization bypass due to malformed hosts in URLs. (bsc#1146123)
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1139210
- https://bugzilla.suse.com/1141689
- https://bugzilla.suse.com/1146111
- https://bugzilla.suse.com/1146115
- https://bugzilla.suse.com/1146123
- https://lists.opensuse.org/archives/list/[email protected]/thread/XQV7XTKIELHQ3WYN6US2FNRX7SHXE46J/#XQV7XTKIELHQ3WYN6US2FNRX7SHXE46J
- https://www.suse.com/security/cve/CVE-2019-14809
- https://www.suse.com/security/cve/CVE-2019-9512
- https://www.suse.com/security/cve/CVE-2019-9514