Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

SUSE: 2023:3251-7 Critical: Bci/Golang Buffer Overflow Resolutions

suse
Calendar Grey October 5, 2023
Dist Suse Esm H88
The SUSE Container Update Advisory provides vital updates for the bci/golang container image, improving security and functionality while addressing several vulnerabilities.
The container bci/golang was updated

Summary

Advisory ID: SUSE-RU-2020:1906-1 Released: Tue Jul 14 15:58:16 2020 Summary: Recommended update for lifecycle-data-sle-module-development-tools Type: recommended Severity: moderate Advisory ID: SUSE-RU-2020:3603-1 Released: Wed Dec 2 15:11:46 2020 Summary: Recommended update for lifecycle-data-sle-module-development-tools Type: recommended Severity: moderate Advisory ID: SUSE-RU-2021:2245-1

Topics%20covered

Topics Covered

security advisory security important SUSE stack overflow bci/golang

References

References : 1173407 1211078 CVE-2023-22652 CVE-2023-30078 CVE-2023-30079

CVE-2023-32181

1173407

This update for lifecycle-data-sle-module-development-tools fixes the following issue:

- Ensure package is installed with its corresponding module when lifecycle package is installed. (bsc#1173407)

This update for lifecycle-data-sle-module-development-tools fixes the following issues:

- Added expiration data for the GCC 9 yearly update for the Toolchain/Development modules.

(jsc#ECO-2373, jsc#SLE-10950, jsc#SLE-10951)

This update for lifecycle-data-sle-module-development-tools fixes the following issues:

- mark go1.14 as 'end of life' as go1.16 was released and we only support 2 go versions parallel (jsc#ECO-1484)

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:3247-1
Container Tags : bci/golang:1.21 , bci/golang:1.21-1.4.3 , bci/golang:latest , bci/golang:stable , bci/golang:stable-1.4.3
Container Release : 4.3
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory security important SUSE stack overflow bci/golang

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here