SUSE: 2023:2321-1 bci/golang Security Update
Summary
Advisory ID: SUSE-RU-2023:2827-1 Released: Fri Jul 14 11:27:47 2023 Summary: Recommended update for libxml2 Type: recommended Severity: moderate Advisory ID: SUSE-SU-2023:2846-1 Released: Mon Jul 17 08:39:40 2023 Summary: Security update for go1.20 Type: security Severity: moderate Advisory ID: SUSE-RU-2023:2847-1 Released: Mon Jul 17 08:40:42 2023 Summary: Recommended update for audit Type: recommended Severity: moderate Advisory ID: SUSE-RU-2023:2855-1 Released: Mon Jul 17 16:35:21 2023 Summary: Recommended update for openldap2 Type: recommended Severity: moderate
References
References : 1206346 1210004 1212260 1213229 CVE-2023-29406
This update for libxml2 fixes the following issues:
- Build also for modern python version (jsc#PED-68)
1206346,1213229,CVE-2023-29406
This update for go1.20 fixes the following issues:
go was updated to version 1.20.6 (bsc#1206346):
- CVE-2023-29406: Fixed insufficient sanitization of Host header in net/http (bsc#1213229).
1210004
This update for audit fixes the following issues:
- Check for AF_UNIX unnamed sockets (bsc#1210004)
- Enable livepatching on main library on x86_64
1212260
This update for openldap2 fixes the following issues:
- libldap2 crashes on ldap_sasl_bind_s (bsc#1212260)
The following package changes have been done:
- libldap-data-2.4.46-150200.14.17.1 updated
- libaudit1-3.0.6-150400.4.10.1 updated
- libxml2-2-2.10.3-150400.5.3.2 updated
- libldap-2_4-2-2.4.46-150200.14.17.1 updated
- go1.20-1.20.6-150000.1.17.1 updated
- container:sles15-image-15.0.0-36.5.13 updated