Alerts This Week
Warning Icon 1 485
Alerts This Week
Warning Icon 1 485

SUSE: 2023:2321-1 Moderate: bci/golang Host Header Issue

suse
Calendar Grey July 18, 2023
Dist Suse Esm H88
SUSE Container Security Announcement discloses bci/golang patch solving Host header vulnerabilities among other concerns.
The container bci/golang was updated

Summary

Advisory ID: SUSE-RU-2023:2827-1 Released: Fri Jul 14 11:27:47 2023 Summary: Recommended update for libxml2 Type: recommended Severity: moderate Advisory ID: SUSE-SU-2023:2846-1 Released: Mon Jul 17 08:39:40 2023 Summary: Security update for go1.20 Type: security Severity: moderate Advisory ID: SUSE-RU-2023:2847-1 Released: Mon Jul 17 08:40:42 2023 Summary: Recommended update for audit Type: recommended

Topics%20covered

Topics Covered

security advisory moderate security update SUSE container bci/golang

References

References : 1206346 1210004 1212260 1213229 CVE-2023-29406

This update for libxml2 fixes the following issues:

- Build also for modern python version (jsc#PED-68)

1206346,1213229,CVE-2023-29406

This update for go1.20 fixes the following issues:

go was updated to version 1.20.6 (bsc#1206346):

- CVE-2023-29406: Fixed insufficient sanitization of Host header in net/http (bsc#1213229).

1210004

This update for audit fixes the following issues:

- Check for AF_UNIX unnamed sockets (bsc#1210004)

- Enable livepatching on main library on x86_64

1212260

This update for openldap2 fixes the following issues:

- libldap2 crashes on ldap_sasl_bind_s (bsc#1212260)

The following package changes have been done:

- libldap-data-2.4.46-150200.14.17.1 updated

- libaudit1-3.0.6-150400.4.10.1 updated

Container Advisory ID : SUSE-CU-2023:2321-1
Container Tags : bci/golang:1.20 , bci/golang:1.20-1.8.6 , bci/golang:latest , bci/golang:stable , bci/golang:stable-1.8.6
Container Release : 8.6
Severity : moderate
Type : security

Topics%20covered

Topics Covered

security advisory moderate security update SUSE container bci/golang

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here