SUSE: 2023:3348-1 Important: bci/golang Container Security Update
suse
October 10, 2023
The container bci/golang was updated
Summary
Advisory ID: SUSE-SU-2023:3954-1 Released: Tue Oct 3 20:09:47 2023 Summary: Security update for libeconf Type: security Severity: important Advisory ID: SUSE-RU-2023:3994-1 Released: Fri Oct 6 13:44:15 2023 Summary: Recommended update for git Type: recommended Severity: moderate Advisory ID: SUSE-SU-2023:3997-1 Released: Fri Oct 6 14:13:56 2023 Summary: Security update for nghttp2 Type: security
References
References : 1211078 1215533 1215713 CVE-2023-22652 CVE-2023-30078 CVE-2023-30079
CVE-2023-32181 CVE-2023-35945
1211078,CVE-2023-22652,CVE-2023-30078,CVE-2023-30079,CVE-2023-32181
This update for libeconf fixes the following issues:
Update to version 0.5.2.
- CVE-2023-30078, CVE-2023-32181: Fixed a stack-buffer-overflow vulnerability in 'econf_writeFile' function (bsc#1211078).
- CVE-2023-30079, CVE-2023-22652: Fixed a stack-buffer-overflow vulnerability in 'read_file' function. (bsc#1211078)
1215533
This update for git fixes the following issues:
- Downgrade openssh dependency to recommends (bsc#1215533)
1215713,CVE-2023-35945
This update for nghttp2 fixes the following issues:
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Container Advisory ID : SUSE-CU-2023:3348-1
Container Tags : bci/golang:1.19-openssl , bci/golang:1.19-openssl-7.6 , bci/golang:oldstable-openssl , bci/golang:oldstable-openssl-7.6
Container Release : 7.6
Severity : important
Type : security
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!