SUSE-RU-2024:0768-1: Recommended update for go1.21
This update for go1.21 fixes the following issues: go1.21.7 (released 2024-02-06) includes fixes to the compiler, the go command, the runtime, and the crypto/x509 package. (bsc#1212475)
go#63209 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21
go#63768 runtime: pinner.Pin doesn't panic when it says it will go#64497 cmd/go: flag modcacherw does not take effect in the target package go#64761 staticlockranking builders failing on release branches on LUCI go#64935 runtime: "traceback: unexpected SPWRITE function runtime.systemstack" go#65023 x/tools/go/analysis/unitchecker,slices: TestVetStdlib failing due to vet errors in panic tests go#65053 cmd/compile: //go:build file version ignored when calling generic fn which has related type params go#65323 crypto: rollback BoringCrypto fips-20220613 update go#65351 cmd/go: go generate fails silently when run on a package in a nested workspace module go#65380 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd6410.15 LUCI builder go#65449 runtime/trace: frame pointer unwinding crash on arm64 during async preemption
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/go1.21-docto a version that resolves this vulnerability.Fixed in 1.21.7-1.24.1 - Upgrade
Upgrade
suse/go1.21to a version that resolves this vulnerability.Fixed in 1.21.7-1.24.1 - Upgrade
Upgrade
go1.21to a version that resolves this vulnerability.Fixed in go1.21.7Patch SUSE-SLE-SDK-12-SP5-2024-768=1
Event History
Frequently Asked Questions
Which systems are covered by this update?
The update applies to SUSE Linux Enterprise Software Development Kit 12 SP5 on aarch64, ppc64le, s390x, and x86_64. The listed packages are suse/go1.21 and suse/go1.21-doc.
Are the reported issues limited to a single Go component?
No. The update includes fixes affecting the compiler, go command, runtime, crypto/x509, runtime tracing, and related tooling behavior.
Does the advisory identify an immediate workaround if the update cannot be installed?
No workaround or mitigation is provided in the advisory. The stated remediation is to apply the go1.21.7 update.