Vulnerability Scan Report for registry.suse.com/bci/golang:1.20-2.7
Go 1.21 development container based on the SLE Base Container Image.
registry.suse.com/bci/golang:1.20-2.7
Last scanned on: April 12, 2025 15:02
Go 1.21 development container based on the SLE Base Container Image.
Last scanned on: April 12, 2025 15:02
| Package Name | Severity | Status | Description | Reference links | |
|---|---|---|---|---|---|
| openssl-1_1 | MEDIUM | fixed |
Security update for openssl-1_1 Vulnerability ID: SUSE-SU-2023:1911-1 Installed Version: 1.1.1l-150400.7.28.1 Fixed Version: 1.1.1l-150400.7.34.1 This update for openssl-1_1 fixes the following issues: - CVE-2023-0465: Invalid certificate policies in leaf certificates were silently ignored (bsc#1209878). - CVE-2023-0466: Certificate policy check were not enabled (bsc#1209873). |
||
| openssl-1_1 | MEDIUM | fixed |
Security update for openssl-1_1 Vulnerability ID: SUSE-SU-2023:2342-1 Installed Version: 1.1.1l-150400.7.28.1 Fixed Version: 1.1.1l-150400.7.37.1 This update for openssl-1_1 fixes the following issues: - CVE-2023-2650: Fixed possible denial of service translating ASN.1 object identifiers (bsc#1211430). |
||
| openssl-1_1 | MEDIUM | fixed |
Security update for openssl-1_1 Vulnerability ID: SUSE-SU-2023:2648-1 Installed Version: 1.1.1l-150400.7.28.1 Fixed Version: 1.1.1l-150400.7.42.1 This update for openssl-1_1 fixes the following issues: - CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption. The previous fix for this timing side channel turned out to cause a severe 2-3x performance regression in the typical use case (bsc#1207534). - Update further expiring certificates that affect the testsuite (bsc#1201627). |
||
| openssl-1_1 | MEDIUM | fixed |
Security update for openssl-1_1 Vulnerability ID: SUSE-SU-2023:2962-1 Installed Version: 1.1.1l-150400.7.28.1 Fixed Version: 1.1.1l-150400.7.48.1 This update for openssl-1_1 fixes the following issues: - CVE-2023-3446: Fixed DH_check() excessive time with over sized modulus (bsc#1213487). |
||
| openssl-1_1 | MEDIUM | fixed |
Security update for openssl-1_1 Vulnerability ID: SUSE-SU-2023:3397-1 Installed Version: 1.1.1l-150400.7.28.1 Fixed Version: 1.1.1l-150400.7.53.1 This update for openssl-1_1 fixes the following issues: - CVE-2023-3817: Fixed a potential DoS due to excessive time spent checking DH q parameter value. (bsc#1213853) - Don't pass zero length input to EVP_Cipher because s390x assembler optimized AES cannot handle zero size. (bsc#1213517) |
||