Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

SUSE: 2023:4104-1 Important: bci/golang Security Update

suse
Calendar Grey December 13, 2023
Dist Suse Esm H88
SUSE Container Patch Notification for bci/golang includes important security updates addressing vulnerabilities.
The container bci/golang was updated

Summary

Advisory ID: SUSE-RU-2023:4695-1 Released: Fri Dec 8 09:01:20 2023 Summary: Recommended update for lifecycle-data-sle-module-development-tools Type: recommended Severity: moderate Advisory ID: SUSE-SU-2023:4708-1 Released: Mon Dec 11 10:44:30 2023 Summary: Security update for go1.20 Type: security Severity: important Advisory ID: SUSE-RU-2023:4716-1 Released: Mon Dec 11 18:38:23 2023

Topics%20covered

Topics Covered

security advisory patch important suse golang container

References

References : 1206346 1216501 1216578 1216862 1216943 1217833 1217834 CVE-2023-39326

CVE-2023-45284 CVE-2023-45285

1216578

This update for lifecycle-data-sle-module-development-tools fixes the following issues:

- Temporary remove go1.19-openssl EOL, will be readded once we ship get go1.21-openssl yet. (bsc#1216578)

- Mark gcc12 EOL date to April 30th of 2024 (6 months after release of

gcc13) (jsc#PED-6584)

1206346,1216943,1217833,1217834,CVE-2023-39326,CVE-2023-45284,CVE-2023-45285

This update for go1.20 fixes the following issues:

Update to go1.20.12:

- CVE-2023-45285: cmd/go: git VCS qualifier in module path uses git:// scheme (bsc#1217834).

- CVE-2023-45284: path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4 (bsc#1216943).

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:4104-1
Container Tags : bci/golang:1.20 , bci/golang:1.20-2.4.61 , bci/golang:oldstable , bci/golang:oldstable-2.4.61
Container Release : 4.61
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory patch important suse golang container

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here