File _patchinfo of Package patchinfo.36169

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.36169

<patchinfo incident="36169">
  <issue tracker="jsc" id="SLE-18320"/>
  <issue tracker="bnc" id="1230254">VUL-0: CVE-2024-34158: go1.22,go1.23: go/build/constraint: stack exhaustion in Parse</issue>
  <issue tracker="bnc" id="1230253">VUL-0: CVE-2024-34156: go1.22,go1.23: encoding/gob: stack exhaustion in Decoder.Decode</issue>
  <issue tracker="bnc" id="1230252">VUL-0: CVE-2024-34155: go1.22,go1.23: go/parser: stack exhaustion in all Parse* functions</issue>
  <issue tracker="cve" id="2024-34158"/>
  <issue tracker="cve" id="2024-34155"/>
  <issue tracker="cve" id="2024-34156"/>
  <packager>jfkw</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for go1.21-openssl</summary>
  <description>This update for go1.21-openssl fixes the following issues:

- CVE-2024-34158: Fixed stack exhaustion in Parse in go/build/constraint (bsc#1230254).
- CVE-2024-34156: Fixed stack exhaustion in Decoder.Decode in encoding/gob (bsc#1230253).
- CVE-2024-34155: Fixed stack exhaustion in all Parse* functions (bsc#1230252).

- Update to version 1.21.13.3 cut from the go1.21-fips-release (jsc#SLE-18320).
</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.36169

Places