Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

SUSE: 2023:1009-1 Important: bci/golang Security Update

suse
Calendar Grey April 7, 2023
Scroller Suse
SUSE Container Update Notice for bci/java incorporates critical security enhancements and significant fixes for identified issues.
The container bci/golang was updated

Summary

Advisory ID: SUSE-RU-2023:1779-1 Released: Thu Apr 6 08:16:58 2023 Summary: Recommended update for systemd Type: recommended Severity: moderate Advisory ID: SUSE-SU-2023:1791-1 Released: Thu Apr 6 15:37:30 2023 Summary: Security update for go1.20 Type: security Severity: important

Topics%20covered

Topics Covered

security advisory denial of service security update important systemd container bci/golang

References

References : 1206346 1208432 1210127 1210128 1210129 1210130 CVE-2023-24534

CVE-2023-24536 CVE-2023-24537 CVE-2023-24538

1208432

This update for systemd fixes the following issues:

- Fix return non-zero value when disabling SysVinit service (bsc#1208432)

- Drop build requirement on libpci, it's not no longer needed

- Move systemd-boot and all components managing (secure) UEFI boot into udev

sub-package, so they aren't installed in systemd based containers

1206346,1210127,1210128,1210129,1210130,CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538

This update for go1.20 fixes the following issues:

Update to version 1.20.3:

* CVE-2023-24534: security: net/http, net/textproto: denial of service from excessive memory allocation (bsc#1210127)

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:1009-1
Container Tags : bci/golang:1.20 , bci/golang:1.20-2.21 , bci/golang:latest
Container Release : 2.21
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory denial of service security update important systemd container bci/golang

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.