Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

SUSE: 2023:1008-1 Important: bci/golang Denial Of Service Fix

suse
Calendar Grey April 7, 2023
Dist Suse Esm H88
Essential SUSE container refresh for bci/python tackling significant vulnerabilities and potential service disruption threats.
The container bci/golang was updated

Summary

Advisory ID: SUSE-RU-2023:1779-1 Released: Thu Apr 6 08:16:58 2023 Summary: Recommended update for systemd Type: recommended Severity: moderate Advisory ID: SUSE-SU-2023:1792-1 Released: Thu Apr 6 15:37:55 2023 Summary: Security update for go1.19 Type: security Severity: important

Topics%20covered

Topics Covered

security advisory security update DoS important SUSE bci/golang

References

References : 1200441 1208432 1210127 1210128 1210129 1210130 CVE-2023-24534

CVE-2023-24536 CVE-2023-24537 CVE-2023-24538

1208432

This update for systemd fixes the following issues:

- Fix return non-zero value when disabling SysVinit service (bsc#1208432)

- Drop build requirement on libpci, it's not no longer needed

- Move systemd-boot and all components managing (secure) UEFI boot into udev

sub-package, so they aren't installed in systemd based containers

1200441,1210127,1210128,1210129,1210130,CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538

This update for go1.19 fixes the following issues:

Update to 1.19.8

* CVE-2023-24534: security: net/http, net/textproto: denial of service from excessive memory allocation (bsc#1210127)

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:1008-1
Container Tags : bci/golang:1.19 , bci/golang:1.19-22.21
Container Release : 22.21
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory security update DoS important SUSE bci/golang

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here