Alerts This Week
Warning Icon 1 914
Alerts This Week
Warning Icon 1 914

SUSE: 2022:1298-1 Important: bci/golang Security Update

suse
Calendar Grey June 8, 2022
Dist Suse Esm H88
SUSE: bci/golang updated with crucial patches to address important security issues, enhancing platform integrity.
The container bci/golang was updated

Summary

Advisory ID: SUSE-SU-2022:2004-1 Released: Tue Jun 7 16:34:20 2022 Summary: Security update for go1.17 Type: security Severity: important

Topics%20covered

Topics Covered

security advisory important security patch SUSE container update bci/golang Go1.17

References

References : 1190649 1200134 1200135 1200136 1200137 CVE-2022-29804 CVE-2022-30580

CVE-2022-30629 CVE-2022-30634

1190649,1200134,1200135,1200136,1200137,CVE-2022-29804,CVE-2022-30580,CVE-2022-30629,CVE-2022-30634

This update for go1.17 fixes the following issues:

Update to go1.17.11 (released 2022-06-01) (bsc#1190649):

- CVE-2022-30634: Fixed crypto/rand rand.Read hangs with extremely large buffers (bsc#1200134).

- CVE-2022-30629: Fixed crypto/tls session tickets lack random ticket_age_add (bsc#1200135).

- CVE-2022-29804: Fixed path/filepath Clean(`.\c:`) returns `c:` on Windows (bsc#1200137).

- CVE-2022-30580: Fixed os/exec empty Cmd.Path can result in running unintended binary on Windows (bsc#1200136).

The following package changes have been done:

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:1298-1
Container Tags : bci/golang:1.17 , bci/golang:1.17-17.55
Container Release : 17.55
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory important security patch SUSE container update bci/golang Go1.17

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here