Описание
Security update for go1.23
This update for go1.23 fixes the following issues:
- Update to go1.23.12:
- CVE-2025-47906: Fixed LookPath returning unexpected paths (bsc#1247719)
- CVE-2025-47907: Fixed incorrect results returned from Rows.Scan (bsc#1247720)
- go#74415 runtime: use-after-free of allpSnapshot in findRunnable
- go#74693 runtime: segfaults in runtime.(*unwinder).next
- go#74721 cmd/go: TestScript/build_trimpath_cgo fails to decode dwarf on release-branch.go1.23
- go#74726 cmd/cgo/internal/testsanitizers: failures with signal: segmentation fault or exit status 66
Список пакетов
Container bci/golang:1.23
go1.23-1.23.12-150000.1.40.1
go1.23-doc-1.23.12-150000.1.40.1
go1.23-race-1.23.12-150000.1.40.1
SUSE Enterprise Storage 7.1
go1.23-1.23.12-150000.1.40.1
go1.23-doc-1.23.12-150000.1.40.1
go1.23-race-1.23.12-150000.1.40.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS
go1.23-1.23.12-150000.1.40.1
go1.23-doc-1.23.12-150000.1.40.1
go1.23-race-1.23.12-150000.1.40.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
go1.23-1.23.12-150000.1.40.1
go1.23-doc-1.23.12-150000.1.40.1
go1.23-race-1.23.12-150000.1.40.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
go1.23-1.23.12-150000.1.40.1
go1.23-doc-1.23.12-150000.1.40.1
go1.23-race-1.23.12-150000.1.40.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
go1.23-1.23.12-150000.1.40.1
go1.23-doc-1.23.12-150000.1.40.1
go1.23-race-1.23.12-150000.1.40.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
go1.23-1.23.12-150000.1.40.1
go1.23-doc-1.23.12-150000.1.40.1
go1.23-race-1.23.12-150000.1.40.1
SUSE Linux Enterprise Module for Development Tools 15 SP6
go1.23-1.23.12-150000.1.40.1
go1.23-doc-1.23.12-150000.1.40.1
go1.23-race-1.23.12-150000.1.40.1
SUSE Linux Enterprise Module for Development Tools 15 SP7
go1.23-1.23.12-150000.1.40.1
go1.23-doc-1.23.12-150000.1.40.1
go1.23-race-1.23.12-150000.1.40.1
SUSE Linux Enterprise Server 15 SP3-LTSS
go1.23-1.23.12-150000.1.40.1
go1.23-doc-1.23.12-150000.1.40.1
go1.23-race-1.23.12-150000.1.40.1
SUSE Linux Enterprise Server 15 SP4-LTSS
go1.23-1.23.12-150000.1.40.1
go1.23-doc-1.23.12-150000.1.40.1
go1.23-race-1.23.12-150000.1.40.1
SUSE Linux Enterprise Server 15 SP5-LTSS
go1.23-1.23.12-150000.1.40.1
go1.23-doc-1.23.12-150000.1.40.1
go1.23-race-1.23.12-150000.1.40.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3
go1.23-1.23.12-150000.1.40.1
go1.23-doc-1.23.12-150000.1.40.1
go1.23-race-1.23.12-150000.1.40.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4
go1.23-1.23.12-150000.1.40.1
go1.23-doc-1.23.12-150000.1.40.1
go1.23-race-1.23.12-150000.1.40.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5
go1.23-1.23.12-150000.1.40.1
go1.23-doc-1.23.12-150000.1.40.1
go1.23-race-1.23.12-150000.1.40.1
openSUSE Leap 15.6
go1.23-1.23.12-150000.1.40.1
go1.23-doc-1.23.12-150000.1.40.1
go1.23-race-1.23.12-150000.1.40.1
Ссылки
- Link for SUSE-SU-2025:02759-1
- E-Mail link for SUSE-SU-2025:02759-1
- SUSE Security Ratings
- SUSE Bug 1229122
- SUSE Bug 1247719
- SUSE Bug 1247720
- SUSE CVE CVE-2025-47906 page
- SUSE CVE CVE-2025-47907 page
Описание
unknown
Затронутые продукты
Container bci/golang:1.23:go1.23-1.23.12-150000.1.40.1
Container bci/golang:1.23:go1.23-doc-1.23.12-150000.1.40.1
Container bci/golang:1.23:go1.23-race-1.23.12-150000.1.40.1
SUSE Enterprise Storage 7.1:go1.23-1.23.12-150000.1.40.1
Ссылки
- CVE-2025-47906
- SUSE Bug 1247719
Описание
Cancelling a query (e.g. by cancelling the context passed to one of the query methods) during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with those of another query, causing the call to Scan to return either unexpected results from the other query or an error.
Затронутые продукты
Container bci/golang:1.23:go1.23-1.23.12-150000.1.40.1
Container bci/golang:1.23:go1.23-doc-1.23.12-150000.1.40.1
Container bci/golang:1.23:go1.23-race-1.23.12-150000.1.40.1
SUSE Enterprise Storage 7.1:go1.23-1.23.12-150000.1.40.1
Ссылки
- CVE-2025-47907
- SUSE Bug 1247720