Test ID:	1.3.6.1.4.1.25623.1.0.852197
Category:	SuSE Local Security Checks
Title:	openSUSE: Security Advisory for go1.11 (openSUSE-SU-2018:4181-1)
Summary:	The remote host is missing an update for the 'go1.11'; package(s) announced via the openSUSE-SU-2018:4181-1 advisory.;; This NVT has been replaced by OID: 1.3.6.1.4.1.25623.1.0.814577
Description:	Summary: The remote host is missing an update for the 'go1.11' package(s) announced via the openSUSE-SU-2018:4181-1 advisory. This NVT has been replaced by OID: 1.3.6.1.4.1.25623.1.0.814577 Vulnerability Insight: This new package for go1.11 fixes the following issues: Security issues fixed: - CVE-2018-16873: Fixed a remote code execution in go get, when executed with the -u flag (bsc#1118897) - CVE-2018-16874: Fixed an arbitrary filesystem write in go get, which could lead to code execution (bsc#1118898) - CVE-2018-16875: Fixed a Denial of Service in the crypto/x509 package during certificate chain validation(bsc#1118899) Non-security issues fixed: - Fixed build error with PIE linker flags on ppc64le (bsc#1113978 bsc#1098017) - Make profile.d/go.sh no longer set GOROOT=, in order to make switching between versions no longer break. This ends up removing the need for go.sh entirely (because GOPATH is also set automatically) (bsc#1119634) The following tracked regression fix is included: - Fix a regression that broke go get for import path patterns containing '...' (bsc#1119706) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or 'zypper patch'. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1572=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1572=1 Affected Software/OS: go1.11 on openSUSE Leap 42.3, openSUSE Leap 15.0. Solution: Please install the updated package(s). CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-16873 Common Vulnerability Exposure (CVE) ID: CVE-2018-16874 Common Vulnerability Exposure (CVE) ID: CVE-2018-16875
Copyright	Copyright (C) 2018 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.