Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

SUSE: 2023:1517-1 Important: bci/golang Security Update

suse
Calendar Grey May 11, 2023
Dist Suse Esm H88
SUSE Container Update Notification for bci/python encompasses essential fixes that tackle significant vulnerabilities and provide crucial updates.
The container bci/golang was updated

Summary

Advisory ID: SUSE-SU-2023:2105-1 Released: Fri May 5 08:34:09 2023 Summary: Security update for go1.20 Type: security Severity: important Advisory ID: SUSE-SU-2023:2111-1 Released: Fri May 5 14:34:00 2023 Summary: Security update for ncurses Type: security Severity: moderate Advisory ID: SUSE-RU-2023:2131-1 Released: Tue May 9 13:35:24 2023 Summary: Recommended update for openssh Type: recommended

Topics%20covered

Topics Covered

security advisory package update important application update bci/golang

References

References : 1206346 1206513 1207014 1210127 1210128 1210129 1210130 1210434

1210938 1210963 1211029 1211030 1211031 CVE-2023-24534 CVE-2023-24536

CVE-2023-24537 CVE-2023-24538 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400

CVE-2023-29491

1206346,1210127,1210128,1210129,1210130,1210938,1210963,1211029,1211030,1211031,CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538,CVE-2023-24539,CVE-2023-24540,CVE-2023-29400

This update for go1.20 fixes the following issues:

Update to 1.20.4 (bnc#1206346):

- CVE-2023-24539: Fixed an improper sanitization of CSS values (boo#1211029).

- CVE-2023-24540: Fixed an improper handling of JavaScript whitespace (boo#1211030).

- CVE-2023-29400: Fixed an improper handling of empty HTML attributes (boo#1211031).

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:1517-1
Container Tags : bci/golang:1.20 , bci/golang:1.20-2.48 , bci/golang:latest
Container Release : 2.48
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory package update important application update bci/golang

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here