SUSE Container Update Advisory: bci/golang ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2022:2328-1 Container Tags : bci/golang:1.18 , bci/golang:1.18-16.34 Container Release : 16.34 Severity : important Type : security References : 1193742 1201680 1203185 CVE-2021-46828 CVE-2022-27664 ----------------------------------------------------------------- The container bci/golang was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2022:3305-1 Released: Mon Sep 19 11:45:57 2022 Summary: Security update for libtirpc Type: security Severity: important References: 1201680,CVE-2021-46828 This update for libtirpc fixes the following issues: - CVE-2021-46828: Fixed denial of service vulnerability with lots of connections (bsc#1201680). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2022:3325-1 Released: Wed Sep 21 12:28:17 2022 Summary: Security update for go1.18 Type: security Severity: important References: 1193742,1203185,CVE-2022-27664 This update for go1.18 fixes the following issues: Update to go version 1.18.6 (bsc#1193742): - CVE-2022-27664: Fixed DoS in net/http caused by mishandled server errors after sending GOAWAY (bsc#1203185). The following package changes have been done: - libtirpc-netconfig-1.2.6-150300.3.14.1 updated - libtirpc3-1.2.6-150300.3.14.1 updated - go1.18-1.18.6-150000.1.31.1 updated - container:sles15-image-15.0.0-27.11.25 updated