SUSE-RU-2024:0789-1: Recommended update for go1.20
This update for go1.20 fixes the following issues: go1.20.14 (released 2024-02-06) includes fixes to the crypto/x509 package. (bsc#1206346 go1.20 release tracking) go#64760 staticlockranking builders failing on release branches on LUCI go#65322 crypto: rollback BoringCrypto fips-20220613 update go#65379 crypto/x509: TestIssue51759 consistently failing on gotip-darwin-amd6410.15 LUCI builder
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/go1.20to a version that resolves this vulnerability.Fixed in 1.20.14-150000.1.41.1 - Upgrade
Upgrade
suse/go1.20-docto a version that resolves this vulnerability.Fixed in 1.20.14-150000.1.41.1 - Upgrade
Upgrade
suse/go1.20-debuginfoto a version that resolves this vulnerability.Fixed in 1.20.14-150000.1.41.1 - Upgrade
Upgrade
suse/go1.20-raceto a version that resolves this vulnerability.Fixed in 1.20.14-150000.1.41.1 - Upgrade
Upgrade
go1.20to a version that resolves this vulnerability.Fixed in go1.20.14 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-789=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-SLE-15.5-2024-789=1
Event History
Frequently Asked Questions
Which systems and architectures are covered by this update?
The update applies to SUSE openSUSE Leap 15.5 and the SUSE Development Tools Module 15-SP5 on aarch64, ppc64le, s390x, and x86_64 architectures.
Which Go-related packages are included?
The affected package set includes go1.20, go1.20-doc, go1.20-debuginfo, and go1.20-race.