SUSE-RU-2024:0767-1: Recommended update for go1.20
This update for go1.20 fixes the following issues: go1.20.14 (released 2024-02-06) includes fixes to the crypto/x509 package. (bsc#1206346) go#64760 staticlockranking builders failing on release branches on LUCI go#65322 crypto: rollback BoringCrypto fips-20220613 update go#65379 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd6410.15 LUCI builder
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/go1.20-docto a version that resolves this vulnerability.Fixed in 1.20.14-1.41.1 - Upgrade
Upgrade
suse/go1.20to a version that resolves this vulnerability.Fixed in 1.20.14-1.41.1 - Upgrade
Upgrade
suse/go1.20-debuginfoto a version that resolves this vulnerability.Fixed in 1.20.14-1.41.1 - Upgrade
Upgrade
go1.20to a version that resolves this vulnerability.Fixed in go1.20.14Patch SUSE-SLE-SDK-12-SP5-2024-767=1
Event History
Frequently Asked Questions
Which systems are affected by this update?
The update applies to SUSE Linux Enterprise Software Development Kit 12 SP5 on aarch64, ppc64le, s390x, and x86_64. The listed packages are suse/go1.20, suse/go1.20-doc, and suse/go1.20-debuginfo.
What component received a security-related fix?
go1.20.14 includes fixes to the crypto/x509 package. The provided information does not identify a specific attack vector, affected default configuration, or workaround.