[SUSE-SU-2024:0800-1] Security update for go1.21

Severity Important

CVEs 5

Security update for go1.21

This update for go1.21 fixes the following issues:

Upgrade go to version 1.21.8
CVE-2023-45289: net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect (bsc#1221000)
CVE-2023-45290: net/http: memory exhaustion in Request.ParseMultipartForm (bsc#1221001)
CVE-2024-24783: crypto/x509: Verify panics on certificates with an unknown public key algorithm (bsc#1220999)
CVE-2024-24784: net/mail: comments in display names are incorrectly handled (bsc#1221002)
CVE-2024-24785: html/template: errors returned from MarshalJSON methods may break template escaping (bsc#1221003)

ID

SUSE-SU-2024:0800-1

Severity

important

URL

Published

2024-03-07T09:35:01
(6 months ago)

Modified

2024-03-07T09:35:01
(6 months ago)

Rights

Other Advisories

Source	Name	URL
Suse	SUSE ratings	https://www.suse.com/support/security/rating/
Suse	URL of this CSAF notice	https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_0800-1.json
Suse	URL for SUSE-SU-2024:0800-1	https://www.suse.com/support/update/announcement/2024/suse-su-20240800-1/
Suse	E-Mail link for SUSE-SU-2024:0800-1	https://lists.suse.com/pipermail/sle-security-updates/2024-March/018111.html
Bugzilla	SUSE Bug 1212475	https://bugzilla.suse.com/1212475
Bugzilla	SUSE Bug 1219988	https://bugzilla.suse.com/1219988
Bugzilla	SUSE Bug 1220999	https://bugzilla.suse.com/1220999
Bugzilla	SUSE Bug 1221000	https://bugzilla.suse.com/1221000
Bugzilla	SUSE Bug 1221001	https://bugzilla.suse.com/1221001
Bugzilla	SUSE Bug 1221002	https://bugzilla.suse.com/1221002
Bugzilla	SUSE Bug 1221003	https://bugzilla.suse.com/1221003
CVE	SUSE CVE CVE-2023-45289 page	https://www.suse.com/security/cve/CVE-2023-45289/
CVE	SUSE CVE CVE-2023-45290 page	https://www.suse.com/security/cve/CVE-2023-45290/
CVE	SUSE CVE CVE-2024-24783 page	https://www.suse.com/security/cve/CVE-2024-24783/
CVE	SUSE CVE CVE-2024-24784 page	https://www.suse.com/security/cve/CVE-2024-24784/
CVE	SUSE CVE CVE-2024-24785 page	https://www.suse.com/security/cve/CVE-2024-24785/

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date