shield Security update for go1.21-openssl

SUSE-SLE-Module-Development-Tools-15-SP5-2024-3809

This update for go1.21-openssl fixes the following issues: - CVE-2024-34158: Fixed stack exhaustion in Parse in go/build/constraint (bsc#1230254). - CVE-2024-34156: Fixed stack exhaustion in Decoder.Decode in encoding/gob (bsc#1230253). - CVE-2024-34155: Fixed stack exhaustion in all Parse* functions (bsc#1230252). - Update to version 1.21.13.3 cut from the go1.21-fips-release (jsc#SLE-18320).

Release Date

Oct 30 2024
References

Bugzilla: 1230254, 1230253, 1230252
CVEs: CVE-2024-34158, CVE-2024-34155, CVE-2024-34156
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Development Tools Module 15.5 ppc64le

Packages

go1.21-openssl
A compiled, garbage-collected, concurrent programming language

1.21.13.4-150000.1.14.1 lock rpm lock src

go1.21-openssl-doc
Go documentation

1.21.13.4-150000.1.14.1 lock rpm

go1.21-openssl-race
Go runtime race detector

1.21.13.4-150000.1.14.1 lock rpm

Development Tools Module 15.5 aarch64

Packages

go1.21-openssl
A compiled, garbage-collected, concurrent programming language

1.21.13.4-150000.1.14.1 lock rpm lock src

go1.21-openssl-doc
Go documentation

1.21.13.4-150000.1.14.1 lock rpm

go1.21-openssl-race
Go runtime race detector

1.21.13.4-150000.1.14.1 lock rpm

Development Tools Module 15.5 s390x

Packages

go1.21-openssl
A compiled, garbage-collected, concurrent programming language

1.21.13.4-150000.1.14.1 lock rpm lock src

go1.21-openssl-doc
Go documentation

1.21.13.4-150000.1.14.1 lock rpm

go1.21-openssl-race
Go runtime race detector

1.21.13.4-150000.1.14.1 lock rpm

Development Tools Module 15.5 x86_64

Packages

go1.21-openssl
A compiled, garbage-collected, concurrent programming language

1.21.13.4-150000.1.14.1 lock rpm lock src

go1.21-openssl-doc
Go documentation

1.21.13.4-150000.1.14.1 lock rpm

go1.21-openssl-race
Go runtime race detector

1.21.13.4-150000.1.14.1 lock rpm