Alerts This Week
Warning Icon 1 775
Alerts This Week
Warning Icon 1 775

SUSE: 2022:1217-1 Important: BCI/Golang Security Advisory

suse
Calendar Grey May 31, 2022
Dist Suse Esm H88
The SUSE Container Update Announcement outlines updates for bci/golang, addressing significant security flaws and enhancements.
The container bci/golang was updated

Summary

Advisory ID: SUSE-RU-2022:1851-1 Released: Thu May 26 08:59:55 2022 Summary: Recommended update for gcc8 Type: recommended Severity: moderate Advisory ID: SUSE-SU-2022:1862-1 Released: Thu May 26 12:41:44 2022 Summary: Security update for go1.17 Type: security Severity: moderate Advisory ID: SUSE-SU-2022:1870-1 Released: Fri May 27 10:03:40 2022 Summary: Security update for curl Type: security

Topics%20covered

Topics Covered

security advisory security issue software update important SUSE golang container

References

References : 1190649 1197716 1199223 1199224 1199232 1199413 CVE-2022-1586

CVE-2022-27781 CVE-2022-27782 CVE-2022-29526

1197716

This update for gcc8 fixes the following issues:

- Fix build against SP4. (bsc#1197716)

- Remove bogus fixed include bits/statx.h from glibc 2.30 (bsc#1197716)

1190649,1199413,CVE-2022-29526

This update for go1.17 fixes the following issues:

- CVE-2022-29526: Fixed faccessat() system call operation that checked the wrong group (bsc#1199413).

- go1.17.10 (released 2022-05-10) (bsc#1190649).

1199223,1199224,CVE-2022-27781,CVE-2022-27782

This update for curl fixes the following issues:

- CVE-2022-27781: Fixed CERTINFO never-ending busy-loop (bsc#1199223)

- CVE-2022-27782: Fixed TLS and SSH connection too eager reuse (bsc#1199224)

1199232,CVE-2022-1586

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:1217-1
Container Tags : bci/golang:1.17 , bci/golang:1.17-17.40
Container Release : 17.40
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory security issue software update important SUSE golang container

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here