SUSE-CU-2023:2321-1: Security update of bci/golang

[sle-security-updates at lists.suse.com]

SUSE Container Update Advisory: bci/golang
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2023:2321-1
Container Tags        : bci/golang:1.20 , bci/golang:1.20-1.8.6 , bci/golang:latest , bci/golang:stable , bci/golang:stable-1.8.6
Container Release     : 8.6
Severity              : moderate
Type                  : security
References            : 1206346 1210004 1212260 1213229 CVE-2023-29406 
-----------------------------------------------------------------

The container bci/golang was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2023:2827-1
Released:    Fri Jul 14 11:27:47 2023
Summary:     Recommended update for libxml2
Type:        recommended
Severity:    moderate
References:  
This update for libxml2 fixes the following issues:

- Build also for modern python version (jsc#PED-68)

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2023:2846-1
Released:    Mon Jul 17 08:39:40 2023
Summary:     Security update for go1.20
Type:        security
Severity:    moderate
References:  1206346,1213229,CVE-2023-29406
This update for go1.20 fixes the following issues:

  go was updated to version 1.20.6 (bsc#1206346):

  - CVE-2023-29406: Fixed insufficient sanitization of Host header in net/http (bsc#1213229).

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2023:2847-1
Released:    Mon Jul 17 08:40:42 2023
Summary:     Recommended update for audit
Type:        recommended
Severity:    moderate
References:  1210004
This update for audit fixes the following issues:

- Check for AF_UNIX unnamed sockets (bsc#1210004)
- Enable livepatching on main library on x86_64

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2023:2855-1
Released:    Mon Jul 17 16:35:21 2023
Summary:     Recommended update for openldap2
Type:        recommended
Severity:    moderate
References:  1212260
This update for openldap2 fixes the following issues:

- libldap2 crashes on ldap_sasl_bind_s (bsc#1212260)


The following package changes have been done:

- libldap-data-2.4.46-150200.14.17.1 updated
- libaudit1-3.0.6-150400.4.10.1 updated
- libxml2-2-2.10.3-150400.5.3.2 updated
- libldap-2_4-2-2.4.46-150200.14.17.1 updated
- go1.20-1.20.6-150000.1.17.1 updated
- container:sles15-image-15.0.0-36.5.13 updated