Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

SUSE: 2023:4247-2 Important: bci/golang Security Issues Resolved

suse
Calendar Grey December 22, 2023
Dist Suse Esm H88
Crucial security upgrade for bci/golang addressing several flaws in version 1.20-openssl.
The container bci/golang was updated

Summary

Advisory ID: SUSE-SU-2023:4930-1 Released: Wed Dec 20 15:25:13 2023 Summary: Security update for go1.20-openssl Type: security Severity: important

Topics%20covered

Topics Covered

security advisory security update important SUSE golang container update

References

References : 1206346 1216943 1217833 1217834 CVE-2023-39326 CVE-2023-45284

CVE-2023-45285

1206346,1216943,1217833,1217834,CVE-2023-39326,CVE-2023-45284,CVE-2023-45285

This update for go1.20-openssl fixes the following issues:

Update to version 1.20.12.1:

- CVE-2023-45285: cmd/go: git VCS qualifier in module path uses git:// scheme (bsc#1217834).

- CVE-2023-45284: path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4 (bsc#1216943).

- CVE-2023-39326: net/http: limit chunked data overhead (bsc#1217833).

- cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents

- cmd/go: TestScript/mod_get_direct fails with 'Filename too long' on Windows

The following package changes have been done:

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:4247-1
Container Tags : bci/golang:1.20-openssl , bci/golang:1.20-openssl-8.30 , bci/golang:oldstable-openssl , bci/golang:oldstable-openssl-8.30
Container Release : 8.30
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory security update important SUSE golang container update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here