1. Home
  2. Security Advisories
  3. SUSE
  4. SUSE-SU-2023:4469-1

[SUSE-SU-2023:4469-1] Security update for go1.21-openssl

Severity Moderate
Affected Packages 24
CVEs 10
Info Packages References Vulnerabilities

Security update for go1.21-openssl

This update for go1.21-openssl fixes the following issues:

Update to version 1.21.4.1 cut from the go1.21-openssl-fips
branch at the revision tagged go1.21.4-1-openssl-fips.

  • Update to go1.21.4

go1.21.4 (released 2023-11-07) includes security fixes to the
path/filepath package, as well as bug fixes to the linker, the
runtime, the compiler, and the go/types, net/http, and
runtime/cgo packages.

  • security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: insecure parsing of Windows paths (bsc#1216943, bsc#1216944)
  • spec: update unification rules
  • cmd/compile: internal compiler error: expected struct value to have type struct
  • cmd/link: split text sections for arm 32-bit
  • runtime: MADV_COLLAPSE causes production performance issues on Linux
  • go/types, x/tools/go/ssa: panic: type param without replacement encountered
  • cmd/compile: -buildmode=c-archive produces code not suitable for use in a shared object on arm64
  • net/http: http2 page fails on firefox/safari if pushing resources

Initial package go1.21-openssl version 1.21.3.1 cut from the
go1.21-openssl-fips branch at the revision tagged
go1.21.3-1-openssl-fips. (jsc#SLE-18320)

  • Go upstream merged branch dev.boringcrypto in go1.19+.
  • In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  • In go1.x-openssl enable FIPS mode (or boring mode as the package is named) either via an environment variable GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  • When the operating system is operating in FIPS mode, Go applications which import crypto/tls/fipsonly limit operations to the FIPS ciphersuite.
  • go1.x-openssl is delivered as two large patches to go1.x applying necessary modifications from the golang-fips/go GitHub project for the Go crypto library to use OpenSSL as the external cryptographic library in a FIPS compliant way.
  • go1.x-openssl modifies the crypto/* packages to use OpenSSL for cryptographic operations.
  • go1.x-openssl uses dlopen() to call into OpenSSL.
  • SUSE RPM packaging introduces a fourth version digit go1.x.y.z corresponding to the golang-fips/go patchset tagged revision.
  • Patchset improvements can be updated independently of upstream Go maintenance releases.
Package Affected Version
pkg:rpm/suse/go1.21-openssl?arch=x86_64&distro=opensuse-leap-15.5 < 1.21.4.1-150000.1.5.1
pkg:rpm/suse/go1.21-openssl?arch=x86_64&distro=opensuse-leap-15.4 < 1.21.4.1-150000.1.5.1
pkg:rpm/suse/go1.21-openssl?arch=s390x&distro=opensuse-leap-15.5 < 1.21.4.1-150000.1.5.1
pkg:rpm/suse/go1.21-openssl?arch=s390x&distro=opensuse-leap-15.4 < 1.21.4.1-150000.1.5.1
pkg:rpm/suse/go1.21-openssl?arch=ppc64le&distro=opensuse-leap-15.5 < 1.21.4.1-150000.1.5.1
pkg:rpm/suse/go1.21-openssl?arch=ppc64le&distro=opensuse-leap-15.4 < 1.21.4.1-150000.1.5.1
pkg:rpm/suse/go1.21-openssl?arch=aarch64&distro=opensuse-leap-15.5 < 1.21.4.1-150000.1.5.1
pkg:rpm/suse/go1.21-openssl?arch=aarch64&distro=opensuse-leap-15.4 < 1.21.4.1-150000.1.5.1
pkg:rpm/suse/go1.21-openssl-race?arch=x86_64&distro=opensuse-leap-15.5 < 1.21.4.1-150000.1.5.1
pkg:rpm/suse/go1.21-openssl-race?arch=x86_64&distro=opensuse-leap-15.4 < 1.21.4.1-150000.1.5.1
pkg:rpm/suse/go1.21-openssl-race?arch=s390x&distro=opensuse-leap-15.5 < 1.21.4.1-150000.1.5.1
pkg:rpm/suse/go1.21-openssl-race?arch=s390x&distro=opensuse-leap-15.4 < 1.21.4.1-150000.1.5.1
pkg:rpm/suse/go1.21-openssl-race?arch=ppc64le&distro=opensuse-leap-15.5 < 1.21.4.1-150000.1.5.1
pkg:rpm/suse/go1.21-openssl-race?arch=ppc64le&distro=opensuse-leap-15.4 < 1.21.4.1-150000.1.5.1
pkg:rpm/suse/go1.21-openssl-race?arch=aarch64&distro=opensuse-leap-15.5 < 1.21.4.1-150000.1.5.1
pkg:rpm/suse/go1.21-openssl-race?arch=aarch64&distro=opensuse-leap-15.4 < 1.21.4.1-150000.1.5.1
pkg:rpm/suse/go1.21-openssl-doc?arch=x86_64&distro=opensuse-leap-15.5 < 1.21.4.1-150000.1.5.1
pkg:rpm/suse/go1.21-openssl-doc?arch=x86_64&distro=opensuse-leap-15.4 < 1.21.4.1-150000.1.5.1
pkg:rpm/suse/go1.21-openssl-doc?arch=s390x&distro=opensuse-leap-15.5 < 1.21.4.1-150000.1.5.1
pkg:rpm/suse/go1.21-openssl-doc?arch=s390x&distro=opensuse-leap-15.4 < 1.21.4.1-150000.1.5.1
pkg:rpm/suse/go1.21-openssl-doc?arch=ppc64le&distro=opensuse-leap-15.5 < 1.21.4.1-150000.1.5.1
pkg:rpm/suse/go1.21-openssl-doc?arch=ppc64le&distro=opensuse-leap-15.4 < 1.21.4.1-150000.1.5.1
pkg:rpm/suse/go1.21-openssl-doc?arch=aarch64&distro=opensuse-leap-15.5 < 1.21.4.1-150000.1.5.1
pkg:rpm/suse/go1.21-openssl-doc?arch=aarch64&distro=opensuse-leap-15.4 < 1.21.4.1-150000.1.5.1
ID
SUSE-SU-2023:4469-1
Severity
moderate
URL
https://www.suse.com/support/update/announcement/2023/suse-su-20234469-1/
Published
2023-11-16T17:59:49
(10 months ago)
Modified
2023-11-16T17:59:49
(10 months ago)
Rights
Copyright 2024 SUSE LLC. All rights reserved.
Other Advisories
Source # ID Name URL
Suse SUSE ratings https://www.suse.com/support/security/rating/
Suse URL of this CSAF notice https://ftp.suse.com/pub/projects/security/csaf/suse-su-2023_4469-1.json
Suse URL for SUSE-SU-2023:4469-1 https://www.suse.com/support/update/announcement/2023/suse-su-20234469-1/
Suse E-Mail link for SUSE-SU-2023:4469-1 https://lists.suse.com/pipermail/sle-security-updates/2023-November/017050.html
Bugzilla SUSE Bug 1212475 https://bugzilla.suse.com/1212475
Bugzilla SUSE Bug 1212667 https://bugzilla.suse.com/1212667
Bugzilla SUSE Bug 1212669 https://bugzilla.suse.com/1212669
Bugzilla SUSE Bug 1215084 https://bugzilla.suse.com/1215084
Bugzilla SUSE Bug 1215085 https://bugzilla.suse.com/1215085
Bugzilla SUSE Bug 1215086 https://bugzilla.suse.com/1215086
Bugzilla SUSE Bug 1215087 https://bugzilla.suse.com/1215087
Bugzilla SUSE Bug 1215090 https://bugzilla.suse.com/1215090
Bugzilla SUSE Bug 1215985 https://bugzilla.suse.com/1215985
Bugzilla SUSE Bug 1216109 https://bugzilla.suse.com/1216109
Bugzilla SUSE Bug 1216943 https://bugzilla.suse.com/1216943
Bugzilla SUSE Bug 1216944 https://bugzilla.suse.com/1216944
CVE SUSE CVE CVE-2023-39318 page https://www.suse.com/security/cve/CVE-2023-39318/
CVE SUSE CVE CVE-2023-39319 page https://www.suse.com/security/cve/CVE-2023-39319/
CVE SUSE CVE CVE-2023-39320 page https://www.suse.com/security/cve/CVE-2023-39320/
CVE SUSE CVE CVE-2023-39321 page https://www.suse.com/security/cve/CVE-2023-39321/
CVE SUSE CVE CVE-2023-39322 page https://www.suse.com/security/cve/CVE-2023-39322/
CVE SUSE CVE CVE-2023-39323 page https://www.suse.com/security/cve/CVE-2023-39323/
CVE SUSE CVE CVE-2023-39325 page https://www.suse.com/security/cve/CVE-2023-39325/
CVE SUSE CVE CVE-2023-44487 page https://www.suse.com/security/cve/CVE-2023-44487/
CVE SUSE CVE CVE-2023-45283 page https://www.suse.com/security/cve/CVE-2023-45283/
CVE SUSE CVE CVE-2023-45284 page https://www.suse.com/security/cve/CVE-2023-45284/
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/suse/go1.21-openssl?arch=x86_64&distro=opensuse-leap-15.5 suse go1.21-openssl < 1.21.4.1-150000.1.5.1 opensuse-leap-15.5 x86_64
Affected pkg:rpm/suse/go1.21-openssl?arch=x86_64&distro=opensuse-leap-15.4 suse go1.21-openssl < 1.21.4.1-150000.1.5.1 opensuse-leap-15.4 x86_64
Affected pkg:rpm/suse/go1.21-openssl?arch=s390x&distro=opensuse-leap-15.5 suse go1.21-openssl < 1.21.4.1-150000.1.5.1 opensuse-leap-15.5 s390x
Affected pkg:rpm/suse/go1.21-openssl?arch=s390x&distro=opensuse-leap-15.4 suse go1.21-openssl < 1.21.4.1-150000.1.5.1 opensuse-leap-15.4 s390x
Affected pkg:rpm/suse/go1.21-openssl?arch=ppc64le&distro=opensuse-leap-15.5 suse go1.21-openssl < 1.21.4.1-150000.1.5.1 opensuse-leap-15.5 ppc64le
Affected pkg:rpm/suse/go1.21-openssl?arch=ppc64le&distro=opensuse-leap-15.4 suse go1.21-openssl < 1.21.4.1-150000.1.5.1 opensuse-leap-15.4 ppc64le
Affected pkg:rpm/suse/go1.21-openssl?arch=aarch64&distro=opensuse-leap-15.5 suse go1.21-openssl < 1.21.4.1-150000.1.5.1 opensuse-leap-15.5 aarch64
Affected pkg:rpm/suse/go1.21-openssl?arch=aarch64&distro=opensuse-leap-15.4 suse go1.21-openssl < 1.21.4.1-150000.1.5.1 opensuse-leap-15.4 aarch64
Affected pkg:rpm/suse/go1.21-openssl-race?arch=x86_64&distro=opensuse-leap-15.5 suse go1.21-openssl-race < 1.21.4.1-150000.1.5.1 opensuse-leap-15.5 x86_64
Affected pkg:rpm/suse/go1.21-openssl-race?arch=x86_64&distro=opensuse-leap-15.4 suse go1.21-openssl-race < 1.21.4.1-150000.1.5.1 opensuse-leap-15.4 x86_64
Affected pkg:rpm/suse/go1.21-openssl-race?arch=s390x&distro=opensuse-leap-15.5 suse go1.21-openssl-race < 1.21.4.1-150000.1.5.1 opensuse-leap-15.5 s390x
Affected pkg:rpm/suse/go1.21-openssl-race?arch=s390x&distro=opensuse-leap-15.4 suse go1.21-openssl-race < 1.21.4.1-150000.1.5.1 opensuse-leap-15.4 s390x
Affected pkg:rpm/suse/go1.21-openssl-race?arch=ppc64le&distro=opensuse-leap-15.5 suse go1.21-openssl-race < 1.21.4.1-150000.1.5.1 opensuse-leap-15.5 ppc64le
Affected pkg:rpm/suse/go1.21-openssl-race?arch=ppc64le&distro=opensuse-leap-15.4 suse go1.21-openssl-race < 1.21.4.1-150000.1.5.1 opensuse-leap-15.4 ppc64le
Affected pkg:rpm/suse/go1.21-openssl-race?arch=aarch64&distro=opensuse-leap-15.5 suse go1.21-openssl-race < 1.21.4.1-150000.1.5.1 opensuse-leap-15.5 aarch64
Affected pkg:rpm/suse/go1.21-openssl-race?arch=aarch64&distro=opensuse-leap-15.4 suse go1.21-openssl-race < 1.21.4.1-150000.1.5.1 opensuse-leap-15.4 aarch64
Affected pkg:rpm/suse/go1.21-openssl-doc?arch=x86_64&distro=opensuse-leap-15.5 suse go1.21-openssl-doc < 1.21.4.1-150000.1.5.1 opensuse-leap-15.5 x86_64
Affected pkg:rpm/suse/go1.21-openssl-doc?arch=x86_64&distro=opensuse-leap-15.4 suse go1.21-openssl-doc < 1.21.4.1-150000.1.5.1 opensuse-leap-15.4 x86_64
Affected pkg:rpm/suse/go1.21-openssl-doc?arch=s390x&distro=opensuse-leap-15.5 suse go1.21-openssl-doc < 1.21.4.1-150000.1.5.1 opensuse-leap-15.5 s390x
Affected pkg:rpm/suse/go1.21-openssl-doc?arch=s390x&distro=opensuse-leap-15.4 suse go1.21-openssl-doc < 1.21.4.1-150000.1.5.1 opensuse-leap-15.4 s390x
Affected pkg:rpm/suse/go1.21-openssl-doc?arch=ppc64le&distro=opensuse-leap-15.5 suse go1.21-openssl-doc < 1.21.4.1-150000.1.5.1 opensuse-leap-15.5 ppc64le
Affected pkg:rpm/suse/go1.21-openssl-doc?arch=ppc64le&distro=opensuse-leap-15.4 suse go1.21-openssl-doc < 1.21.4.1-150000.1.5.1 opensuse-leap-15.4 ppc64le
Affected pkg:rpm/suse/go1.21-openssl-doc?arch=aarch64&distro=opensuse-leap-15.5 suse go1.21-openssl-doc < 1.21.4.1-150000.1.5.1 opensuse-leap-15.5 aarch64
Affected pkg:rpm/suse/go1.21-openssl-doc?arch=aarch64&distro=opensuse-leap-15.4 suse go1.21-openssl-doc < 1.21.4.1-150000.1.5.1 opensuse-leap-15.4 aarch64
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date