Alerts This Week
Warning Icon 1 560
Alerts This Week
Warning Icon 1 560

SUSE: 2025:01848-1 important: go1.23 critical sensitivity exposure

suse
Calendar Grey June 9, 2025
Dist Suse Esm H88
Discover the SUSE Go1.23 Update, enhancing security and performance while addressing critical vulnerabilities. Update now for a safer, more efficient experience
* bsc#1229122 * bsc#1244156 * bsc#1244157 Cross-References:

Summary

## This update for go1.23 fixes the following issues: go1.23.10 (released 2025-06-05) includes security fixes to the /http and os packages, as well as bug fixes to the linker. (bsc#1229122 go1.23 release tracking CVE-2025-0913 CVE-2025-4673) * CVE-2025-0913: os: inconsistent handling of O_CREATE|O_EXCL on Unix and Windows (bsc#1244157) * CVE-2025-4673: net/http: sensitive headers not cleared on cross-origin redirect (bsc#1244156) * runtime/debug: BuildSetting does not document DefaultGODEBUG * cmd/link: Go 1.24.3 and 1.23.9 regression - duplicated definition of symbol dlopen ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6

Topics%20covered

Topics Covered

security advisory security issue important SUSE sensitivity exposure go1.23

References

* bsc#1229122

* bsc#1244156

* bsc#1244157

Cross-

* CVE-2025-0913

* CVE-2025-4673

CVSS scores:

* CVE-2025-0913 ( SUSE ): 6.8

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

* CVE-2025-0913 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

* CVE-2025-4673 ( SUSE ): 8.9

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

* CVE-2025-4673 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N

Affected Products:

* Development Tools Module 15-SP6

* Development Tools Module 15-SP7

* openSUSE Leap 15.6

* SUSE Enterprise Storage 7.1

* SUSE Linux Enterprise Desktop 15 SP6

* SUSE Linux Enterprise Desktop 15 SP7

* SUSE Linux Enterprise High Performance Computing 15 SP3

* SUSE Linux Enterprise High Performance Computing 15 SP4

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2025:01848-1
Release Date: 2025-06-09T18:35:51Z
Rating: important

Topics%20covered

Topics Covered

security advisory security issue important SUSE sensitivity exposure go1.23

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here