SUSE: 2023:2524-1 bci/golang Security Update
Summary
Advisory ID: SUSE-SU-2023:3181-1 Released: Thu Aug 3 21:34:12 2023 Summary: Security update for go1.20 Type: security Severity: important
References
References : 1206346 1213880 CVE-2023-29409
1206346,1213880,CVE-2023-29409
This update for go1.20 fixes the following issues:
- Update to go v1.20.7 (released 2023-08-01) (bsc#1206346)
- CVE-2023-29409: Restrict RSA keys in certificates to less than or equal to 8192 bits to avoid DoSing client/server while validating signatures for extremely large RSA keys. (bsc#1213880)
The following package changes have been done:
- go1.20-1.20.7-150000.1.20.1 updated