Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

SUSE: 2022:3062-1 Important: bci/golang Security Update and Fixes

suse
Calendar Grey November 20, 2022
Dist Suse Esm H88
SUSE has released an updated version of the bci/golang container, addressing significant security vulnerabilities and rectifying problems related to directory traversal in Dpkg.
The container bci/golang was updated

Summary

Advisory ID: SUSE-RU-2022:4066-1 Released: Fri Nov 18 10:43:00 2022 Summary: Recommended update for timezone Type: recommended Severity: important Advisory ID: SUSE-SU-2022:4081-1 Released: Fri Nov 18 15:40:46 2022 Summary: Security update for dpkg Type: security Severity: low

Topics%20covered

Topics Covered

security advisory security update directory traversal important bci/golang

References

References : 1177460 1199944 1202324 1204649 1205156 CVE-2022-1664

1177460,1202324,1204649,1205156

This update for timezone fixes the following issues:

Update timezone version from 2022a to 2022f (bsc#1177460, bsc#1204649, bsc#1205156):

- Mexico will no longer observe DST except near the US border

- Chihuahua moves to year-round -06 on 2022-10-30

- Fiji no longer observes DST

- In vanguard form, GMT is now a Zone and Etc/GMT a link

- zic now supports links to links, and vanguard form uses this

- Simplify four Ontario zones

- Fix a Y2438 bug when reading TZif data

- Enable 64-bit time_t on 32-bit glibc platforms

- Omit large-file support when no longer needed

- Jordan and Syria switch from +02/+03 with DST to year-round +03

- Palestine transitions are now Saturdays at 02:00

- Simplify three Ukraine zones into one

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:3062-1
Container Tags : bci/golang:1.19 , bci/golang:1.19-18.33 , bci/golang:latest
Container Release : 18.33
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory security update directory traversal important bci/golang

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here