Security update for go1.16
This update for go1.16 fixes the following issues: Update to 1.16.5. Includes these security fixes - CVE-2021-33195: net: Lookup functions may return invalid host names (bsc#1187443). - CVE-2021-33196: archive/zip: malformed archive may cause panic or memory exhaustion (bsc#1186622). - CVE-2021-33197: net/http/httputil: ReverseProxy forwards Connection headers if first one is empty (bsc#1187444) - CVE-2021-33198: math/big: (*Rat).SetString with '1.770p02041010010011001001' crashes with 'makeslice: len out of range' (bsc#1187445).
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for go1.16 fixes the following issues: Update to 1.16.5. Includes these security fixes - CVE-2021-33195: net: Lookup functions may return invalid host names (bsc#1187443). - CVE-2021-33196: archive/zip: malformed archive may cause panic or memory exhaustion (bsc#1186622). - CVE-2021-33197: net/http/httputil: ReverseProxy forwards Connection headers if first one is empty (bsc#1187444) - CVE-2021-33198: math/big: (*Rat).SetString with '1.770p02041010010011001001' crashes with 'makeslice: len out of range' (bsc#1187445).
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1182345
- https://bugzilla.suse.com/1186622
- https://bugzilla.suse.com/1187443
- https://bugzilla.suse.com/1187444
- https://bugzilla.suse.com/1187445
- https://www.suse.com/security/cve/CVE-2021-33195
- https://www.suse.com/security/cve/CVE-2021-33196
- https://www.suse.com/security/cve/CVE-2021-33197
- https://www.suse.com/security/cve/CVE-2021-33198
- https://www.suse.com/support/update/announcement/2021/suse-su-20212186-1/