Alerts This Week
Warning Icon 1 485
Alerts This Week
Warning Icon 1 485

SUSE: Important Security Update for go1.23-openssl CVE-2024-45336

suse
Calendar Grey September 11, 2025
Dist Suse Esm H88
Go1.23-openssl security patch resolves various vulnerabilities, improves capabilities, and necessitates prompt implementation for setup.
* bsc#1229122 * bsc#1236045 * bsc#1236046 * bsc#1236801 * bsc#1238572

Summary

## This update for go1.23-openssl fixes the following issues: Update to version 1.23.12 cut from the go1.23-fips-release branch at the revision tagged go1.23.12-1-openssl-fips. ( jsc#SLE-18320) * Rebase to 1.23.12 * Fix HKDF-Extract The latest OpenSSL in c9s/c10s requires nil salt to be passed as a hash length buffer of zeros. Packaging improvements: * Update go_bootstrap_version to go1.21 from go1.20 to shorten the bootstrap chain. go1.21 can optionally be bootstrapped with gccgo and serve as the inital version of go1.x. * Refs boo#1247816 bootstrap go1.21 with gccgo go1.23.12 (released 2025-08-06) includes security fixes to the database/sql and os/exec packages, as well as bug fixes to the runtime. CVE-2025-47906 CVE-2025-47907: * go#74803 go#74466 boo#1247719 security: fix

Topics%20covered

Topics Covered

security advisory security issue SuSE DoS important go1.23-openssl

References

* bsc#1229122

* bsc#1236045

* bsc#1236046

* bsc#1236801

* bsc#1238572

* bsc#1240550

* bsc#1244156

* bsc#1244157

* bsc#1246118

* bsc#1247719

* bsc#1247720

* bsc#1247816

* jsc#SLE-18320

Cross-

* CVE-2024-45336

* CVE-2024-45341

* CVE-2025-0913

* CVE-2025-22866

* CVE-2025-22870

* CVE-2025-22871

* CVE-2025-4673

* CVE-2025-4674

* CVE-2025-47906

* CVE-2025-47907

CVSS scores:

* CVE-2024-45336 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

* CVE-2024-45336 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

* CVE-2024-45341 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

* CVE-2024-45341 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

* CVE-2025-0913 ( SUSE ): 6.8

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2025:03159-1
Release Date: 2025-09-11T03:05:08Z
Rating: important

Topics%20covered

Topics Covered

security advisory security issue SuSE DoS important go1.23-openssl

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here