Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
SUSE:SLE-15:Update
patchinfo.30608
_patchinfo
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File _patchinfo of Package patchinfo.30608
<patchinfo incident="30608"> <issue tracker="bnc" id="1215086">VUL-0: CVE-2023-39320: go1.21: cmd/go: go.mod toolchain directive allows arbitrary execution</issue> <issue tracker="bnc" id="1215085">VUL-0: CVE-2023-39319: go1.20,go1.21: html/template: improper handling of special tags within script contexts</issue> <issue tracker="bnc" id="1212475">go1.21 release tracking</issue> <issue tracker="bnc" id="1215084">VUL-0: CVE-2023-39318: go1.20,go1.21: html/template: improper handling of HTML-like comments within script contexts</issue> <issue tracker="bnc" id="1215090">go1.20,go1.21: Go toolchain packages missing src/cmd/vendor/github.com/google/pprof/internal/driver/html/</issue> <issue tracker="bnc" id="1215087">VUL-0: CVE-2023-39321: CVE-2023-39322: go1.21: crypto/tls: panic when processing post-handshake message on QUIC connections</issue> <issue tracker="cve" id="2023-39320"/> <issue tracker="cve" id="2023-39318"/> <issue tracker="cve" id="2023-39321"/> <issue tracker="cve" id="2023-39322"/> <issue tracker="cve" id="2023-39319"/> <packager>jfkw</packager> <rating>important</rating> <category>security</category> <summary>Security update for go1.21</summary> <description>This update for go1.21 fixes the following issues: Update to go1.21.1 (bsc#1212475). - CVE-2023-39318: Fixed improper handling of HTML-like comments within script contexts in html/template (bsc#1215084). - CVE-2023-39319: Fixed improper handling of special tags within script contexts in html/template (bsc#1215085). - CVE-2023-39320: Fixed arbitrary execution in go.mod toolchain directive (bsc#1215086). - CVE-2023-39321, CVE-2023-39322: Fixed a panic when processing post-handshake message on QUIC connections in crypto/tls (bsc#1215087). The following non-security bug was fixed: - Add missing directory pprof html asset directory to package (bsc#1215090). </description> </patchinfo>
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor