File _patchinfo of Package patchinfo.30837

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.30837

<patchinfo incident="30837">
  <issue tracker="bnc" id="1213229">VUL-0: CVE-2023-29406: go1.19,go1.20: net/http: insufficient sanitization of Host header</issue>
  <issue tracker="bnc" id="1215090">go1.20,go1.21: Go toolchain packages missing src/cmd/vendor/github.com/google/pprof/internal/driver/html/</issue>
  <issue tracker="bnc" id="1213880">VUL-0: CVE-2023-29409: go1.19,go1.20: crypto/tls: restrict RSA keys in certificates to &lt;= 8192 bits</issue>
  <issue tracker="bnc" id="1200441">go1.19 release tracking</issue>
  <issue tracker="cve" id="2023-29406"/>
  <issue tracker="cve" id="2023-29409"/>
  <packager>jfkw</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for go1.19-openssl</summary>
  <description>This update for go1.19-openssl fixes the following issues:

Update to version 1.19.13 (bsc#1200441).

- CVE-2023-29409: Fixed unrestricted RSA keys in certificates (bsc#1213880).
- CVE-2023-29406: Fixed insufficient sanitization of Host header (bsc#1213229).

The following non-security bug was fixed:

- Add missing directory pprof html asset directory to package (bsc#1215090). 
</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.30837

Places