shield Security update for go1.20

SUSE-SLE-Module-Development-Tools-15-SP4-2023-2526

This update for go1.20 fixes the following issues: Update to go1.20.5 (bsc#1206346): - CVE-2023-29402: cmd/go: Fixed cgo code injection (bsc#1212073). - CVE-2023-29403: runtime: Fixed unexpected behavior of setuid/setgid binaries (bsc#1212074). - CVE-2023-29404: cmd/go: Fixed improper sanitization of LDFLAGS (bsc#1212075). - CVE-2023-29405: cmd/go: Fixed improper sanitization of LDFLAGS (bsc#1212076).

• Release Date
  Jun 16 2023
• References
  Bugzilla: 1212073, 1212074, 1212075, 1212076, 1206346
  CVEs: CVE-2023-29403, CVE-2023-29402, CVE-2023-29405, CVE-2023-29404
• Type
  security
• Severity
  moderate

cloud_download Downloads

Development Tools Module 15.4 x86_64

• Packages
  go1.20
  A compiled, garbage-collected, concurrent programming language

  1.20.5-150000.1.14.1 lock rpm lock src

  go1.20-doc
  Go documentation

  1.20.5-150000.1.14.1 lock rpm

  go1.20-race
  Go runtime race detector

  1.20.5-150000.1.14.1 lock rpm

Development Tools Module 15.4 aarch64

• Packages
  go1.20
  A compiled, garbage-collected, concurrent programming language

  1.20.5-150000.1.14.1 lock rpm lock src

  go1.20-doc
  Go documentation

  1.20.5-150000.1.14.1 lock rpm

  go1.20-race
  Go runtime race detector

  1.20.5-150000.1.14.1 lock rpm

Development Tools Module 15.4 ppc64le

• Packages
  go1.20
  A compiled, garbage-collected, concurrent programming language

  1.20.5-150000.1.14.1 lock rpm lock src

  go1.20-doc
  Go documentation

  1.20.5-150000.1.14.1 lock rpm

Development Tools Module 15.4 s390x

• Packages
  go1.20
  A compiled, garbage-collected, concurrent programming language

  1.20.5-150000.1.14.1 lock rpm lock src

  go1.20-doc
  Go documentation

  1.20.5-150000.1.14.1 lock rpm