Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:02759-1

Опубликовано: 12 авг. 2025
Источник: suse-cvrf

Описание

Security update for go1.23

This update for go1.23 fixes the following issues:

  • Update to go1.23.12:
    • CVE-2025-47906: Fixed LookPath returning unexpected paths (bsc#1247719)
    • CVE-2025-47907: Fixed incorrect results returned from Rows.Scan (bsc#1247720)
    • go#74415 runtime: use-after-free of allpSnapshot in findRunnable
    • go#74693 runtime: segfaults in runtime.(*unwinder).next
    • go#74721 cmd/go: TestScript/build_trimpath_cgo fails to decode dwarf on release-branch.go1.23
    • go#74726 cmd/cgo/internal/testsanitizers: failures with signal: segmentation fault or exit status 66

Список пакетов

Container bci/golang:1.23
go1.23-1.23.12-150000.1.40.1
go1.23-doc-1.23.12-150000.1.40.1
go1.23-race-1.23.12-150000.1.40.1
SUSE Enterprise Storage 7.1
go1.23-1.23.12-150000.1.40.1
go1.23-doc-1.23.12-150000.1.40.1
go1.23-race-1.23.12-150000.1.40.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS
go1.23-1.23.12-150000.1.40.1
go1.23-doc-1.23.12-150000.1.40.1
go1.23-race-1.23.12-150000.1.40.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
go1.23-1.23.12-150000.1.40.1
go1.23-doc-1.23.12-150000.1.40.1
go1.23-race-1.23.12-150000.1.40.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
go1.23-1.23.12-150000.1.40.1
go1.23-doc-1.23.12-150000.1.40.1
go1.23-race-1.23.12-150000.1.40.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
go1.23-1.23.12-150000.1.40.1
go1.23-doc-1.23.12-150000.1.40.1
go1.23-race-1.23.12-150000.1.40.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
go1.23-1.23.12-150000.1.40.1
go1.23-doc-1.23.12-150000.1.40.1
go1.23-race-1.23.12-150000.1.40.1
SUSE Linux Enterprise Module for Development Tools 15 SP6
go1.23-1.23.12-150000.1.40.1
go1.23-doc-1.23.12-150000.1.40.1
go1.23-race-1.23.12-150000.1.40.1
SUSE Linux Enterprise Module for Development Tools 15 SP7
go1.23-1.23.12-150000.1.40.1
go1.23-doc-1.23.12-150000.1.40.1
go1.23-race-1.23.12-150000.1.40.1
SUSE Linux Enterprise Server 15 SP3-LTSS
go1.23-1.23.12-150000.1.40.1
go1.23-doc-1.23.12-150000.1.40.1
go1.23-race-1.23.12-150000.1.40.1
SUSE Linux Enterprise Server 15 SP4-LTSS
go1.23-1.23.12-150000.1.40.1
go1.23-doc-1.23.12-150000.1.40.1
go1.23-race-1.23.12-150000.1.40.1
SUSE Linux Enterprise Server 15 SP5-LTSS
go1.23-1.23.12-150000.1.40.1
go1.23-doc-1.23.12-150000.1.40.1
go1.23-race-1.23.12-150000.1.40.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3
go1.23-1.23.12-150000.1.40.1
go1.23-doc-1.23.12-150000.1.40.1
go1.23-race-1.23.12-150000.1.40.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4
go1.23-1.23.12-150000.1.40.1
go1.23-doc-1.23.12-150000.1.40.1
go1.23-race-1.23.12-150000.1.40.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5
go1.23-1.23.12-150000.1.40.1
go1.23-doc-1.23.12-150000.1.40.1
go1.23-race-1.23.12-150000.1.40.1
openSUSE Leap 15.6
go1.23-1.23.12-150000.1.40.1
go1.23-doc-1.23.12-150000.1.40.1
go1.23-race-1.23.12-150000.1.40.1

Описание

unknown


Затронутые продукты
Container bci/golang:1.23:go1.23-1.23.12-150000.1.40.1
Container bci/golang:1.23:go1.23-doc-1.23.12-150000.1.40.1
Container bci/golang:1.23:go1.23-race-1.23.12-150000.1.40.1
SUSE Enterprise Storage 7.1:go1.23-1.23.12-150000.1.40.1

Ссылки

Описание

Cancelling a query (e.g. by cancelling the context passed to one of the query methods) during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with those of another query, causing the call to Scan to return either unexpected results from the other query or an error.


Затронутые продукты
Container bci/golang:1.23:go1.23-1.23.12-150000.1.40.1
Container bci/golang:1.23:go1.23-doc-1.23.12-150000.1.40.1
Container bci/golang:1.23:go1.23-race-1.23.12-150000.1.40.1
SUSE Enterprise Storage 7.1:go1.23-1.23.12-150000.1.40.1

Ссылки
Уязвимость SUSE-SU-2025:02759-1