SUSE-CU-2025:6239-1: Security update of bci/golang

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: bci/golang
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2025:6239-1
Container Tags        : bci/golang:1.24 , bci/golang:1.24.6 , bci/golang:1.24.6-1.73.4 , bci/golang:latest , bci/golang:stable , bci/golang:stable-1.73.4
Container Release     : 73.4
Severity              : moderate
Type                  : security
References            : 1236217 1245573 1247719 1247720 CVE-2025-47906 CVE-2025-47907
                        CVE-2025-6297 
-----------------------------------------------------------------

The container bci/golang was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2025:2714-1
Released:    Wed Aug  6 11:36:56 2025
Summary:     Recommended update for systemd
Type:        recommended
Severity:    moderate
References:  
This update for systemd fixes the following issues:

- triggers.systemd: skip update of hwdb, journal-catalog if executed during
  an offline update.

- systemd-repart is no more considered as experimental (jsc#PED-13213)

- Import commit 130293e510ceb4d121d11823e6ebd4b1e8332ea0 (merge of v254.27)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/278fb676146e35a7b4057f52f34a7bbaf1b82369...130293e510ceb4d121d11823e6ebd4b1e8332ea0

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2025:2734-1
Released:    Fri Aug  8 10:05:10 2025
Summary:     Security update for dpkg
Type:        security
Severity:    moderate
References:  1245573,CVE-2025-6297
This update for dpkg fixes the following issues:

- CVE-2025-6297: Fixed an improper sanitization of directory permissions that could lead to DoS. (bsc#1245573)

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2025:2760-1
Released:    Tue Aug 12 14:08:20 2025
Summary:     Security update for go1.24
Type:        security
Severity:    moderate
References:  1236217,1247719,1247720,CVE-2025-47906,CVE-2025-47907
This update for go1.24 fixes the following issues:

- Update to go1.24.6: 
  * CVE-2025-47906: Fixed LookPath returning unexpected paths (bsc#1247719)
  * CVE-2025-47907: Fixed incorrect results returned from Rows.Scan (bsc#1247720)
  * go#73800 runtime: RSS seems to have increased in Go 1.24 while the runtime accounting has not
  * go#74416 runtime: use-after-free of allpSnapshot in findRunnable
  * go#74694 runtime: segfaults in runtime.(*unwinder).next
  * go#74760 os/user:nolibgcc: TestGroupIdsTestUser failures


The following package changes have been done:

- go1.24-doc-1.24.6-150000.1.32.1 updated
- update-alternatives-1.19.0.4-150000.4.7.1 updated
- libsystemd0-254.27-150600.4.43.3 updated
- go1.24-1.24.6-150000.1.32.1 updated
- go1.24-race-1.24.6-150000.1.32.1 updated
- container:registry.suse.com-bci-bci-base-15.7-0cffa22c4781b79b45cb22872b4da4160b01ca1230a476fd7f81b4fdd3714f23-0 updated