gpp_maybe Security update for container-suseconnect

SUSE-SLE-Module-Containers-15-SP4-2023-871

This update of container-suseconnect fixes the following issue: - container-suseconnect was rebuilt against the current go1.19 release, fixing security issues and other bugs fixed in go1.19.7. - CVE-2022-41723: Fixed quadratic complexity in HPACK decoding (bsc#1208270). - CVE-2022-41724: Fixed panic with arge handshake records in crypto/tls (bsc#1208271). - CVE-2022-41725: Fixed denial of service from excessive resource consumption in net/http and mime/multipart (bsc#1208272). - CVE-2023-24532: Fixed incorrect P-256 ScalarMult and ScalarBaseMult results (bsc#1209030). - CVE-2022-41720: os, net/http: avoid escapes from os.DirFS and http.Dir on Windows (bsc#1206134).

Release Date

Mar 22 2023
References

Bugzilla: 1208271, 1200441, 1208270, 1208272, 1209030, 1206134
CVEs: CVE-2022-41723, CVE-2022-41724, CVE-2023-24532, CVE-2022-41725, CVE-2022-41720
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Containers Module 15.4 aarch64

Packages

container-suseconnect
Provides access to repositories inside containers

2.4.0-150000.4.24.1 lock rpm lock src

Containers Module 15.4 ppc64le

Packages

container-suseconnect
Provides access to repositories inside containers

2.4.0-150000.4.24.1 lock rpm lock src

Containers Module 15.4 s390x

Packages

container-suseconnect
Provides access to repositories inside containers

2.4.0-150000.4.24.1 lock rpm lock src

Containers Module 15.4 x86_64

Packages

container-suseconnect
Provides access to repositories inside containers

2.4.0-150000.4.24.1 lock rpm lock src