Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

SUSE: 2023:4250-1 critical: bci/golang security update released

suse
Calendar Grey December 22, 2023
Dist Suse Esm H88
Major enhancement for bci/golang addressing multiple critical security weaknesses, with an array of corrections put into effect.
The container bci/golang was updated

Summary

Advisory ID: SUSE-SU-2023:4931-1 Released: Wed Dec 20 15:25:42 2023 Summary: Security update for go1.21-openssl Type: security Severity: important

Topics%20covered

Topics Covered

security advisory security issue important security patch SUSE bci/golang

References

References : 1212475 1216943 1217833 1217834 CVE-2023-39326 CVE-2023-45284

CVE-2023-45285

1212475,1216943,1217833,1217834,CVE-2023-39326,CVE-2023-45284,CVE-2023-45285

This update for go1.21-openssl fixes the following issues:

Update to version 1.21.5.1:

- CVE-2023-45285: cmd/go: git VCS qualifier in module path uses git:// scheme (bsc#1217834).

- CVE-2023-45284: path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4 (bsc#1216943).

- CVE-2023-39326: net/http: limit chunked data overhead (bsc#1217833).

- cmd/go: go mod download needs to support toolchain upgrades

- cmd/compile: invalid pointer found on stack when compiled with -race

- os: NTFS deduped file changed from regular to irregular

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:4249-1
Container Tags : bci/golang:1.21-openssl , bci/golang:1.21-openssl-8.30 , bci/golang:latest , bci/golang:stable-openssl , bci/golang:stable-openssl-8.30
Container Release : 8.30
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory security issue important security patch SUSE bci/golang

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here