Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

SUSE: 2023:2320-1 Moderate: Bci/Golang Security Update Advisory

suse
Calendar Grey July 18, 2023
Dist Suse Esm H88
SUSE Container Update Notification for bci/python including critical security fixes and updates for multiple modules published.
The container bci/golang was updated

Summary

Advisory ID: SUSE-RU-2023:2827-1 Released: Fri Jul 14 11:27:47 2023 Summary: Recommended update for libxml2 Type: recommended Severity: moderate Advisory ID: SUSE-SU-2023:2845-1 Released: Mon Jul 17 08:39:07 2023 Summary: Security update for go1.19 Type: security Severity: moderate Advisory ID: SUSE-RU-2023:2847-1 Released: Mon Jul 17 08:40:42 2023 Summary: Recommended update for audit Type: recommended

Topics%20covered

Topics Covered

security advisory moderate security update container bci/golang

References

References : 1200441 1210004 1212260 1213229 CVE-2023-29406

This update for libxml2 fixes the following issues:

- Build also for modern python version (jsc#PED-68)

1200441,1213229,CVE-2023-29406

This update for go1.19 fixes the following issues:

go was updated to version 1.19.11 (bsc#1200441):

- CVE-2023-29406: Fixed insufficient sanitization of Host header in net/http (bsc#1213229).

1210004

This update for audit fixes the following issues:

- Check for AF_UNIX unnamed sockets (bsc#1210004)

- Enable livepatching on main library on x86_64

1212260

This update for openldap2 fixes the following issues:

- libldap2 crashes on ldap_sasl_bind_s (bsc#1212260)

The following package changes have been done:

- libldap-data-2.4.46-150200.14.17.1 updated

- libaudit1-3.0.6-150400.4.10.1 updated

Container Advisory ID : SUSE-CU-2023:2320-1
Container Tags : bci/golang:1.19 , bci/golang:1.19-2.7.6 , bci/golang:oldstable , bci/golang:oldstable-2.7.6
Container Release : 7.6
Severity : moderate
Type : security

Topics%20covered

Topics Covered

security advisory moderate security update container bci/golang

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here