Alerts This Week
Warning Icon 1 905
Alerts This Week
Warning Icon 1 905

SUSE BCI/Golang Container Update: Important Security Fixes

suse
Calendar Grey June 8, 2022
Dist Suse Esm H88
The latest security enhancement for the bci/golang image encompasses critical updates and CVE resolutions that influence performance.
The container bci/golang was updated

Summary

Advisory ID: SUSE-SU-2022:2005-1 Released: Tue Jun 7 16:34:46 2022 Summary: Security update for go1.18 Type: security Severity: important

Topics%20covered

Topics Covered

security advisory security threat patch important SUSE bci/golang

References

References : 1193742 1200134 1200135 1200136 1200137 CVE-2022-29804 CVE-2022-30580

CVE-2022-30629 CVE-2022-30634

1193742,1200134,1200135,1200136,1200137,CVE-2022-29804,CVE-2022-30580,CVE-2022-30629,CVE-2022-30634

This update for go1.18 fixes the following issues:

Update to go1.18.3 (released 2022-06-01) (bsc#1193742):

- CVE-2022-30634: Fixed crypto/rand rand.Read hangs with extremely large buffers (bsc#1200134).

- CVE-2022-30629: Fixed crypto/tls session tickets lack random ticket_age_add (bsc#1200135).

- CVE-2022-29804: Fixed path/filepath Clean(`.\c:`) returns `c:` on Windows (bsc#1200137).

- CVE-2022-30580: Fixed os/exec empty Cmd.Path can result in running unintended binary on Windows (bsc#1200136).

The following package changes have been done:

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:1299-1
Container Tags : bci/golang:1.18 , bci/golang:1.18-7.57 , bci/golang:latest
Container Release : 7.57
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory security threat patch important SUSE bci/golang

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here