SUSE-RU-2026:24151-1: moderate: Recommended update for govulncheck
SLE-UPDATES
null at suse.de
Thu Oct 15 12:40:53 UTC 2026
# Recommended update for govulncheck
Announcement ID: SUSE-RU-2026:24151-1
Release Date: 2026-10-06T15:00:10Z
Rating: moderate
References:
* bsc#1248678
Affected Products:
* SUSE Linux Enterprise Server 16.0
* SUSE Linux Enterprise Server for SAP applications 16.0
An update that has one fix can now be installed.
## Description:
This update for govulncheck fixes the following issues:
Changes in govulncheck:
* Packaging improvements:
* Update to BuildRequires: golang(API) >= 1.27 latest stable. This tool
requires that it be built with the same or newer go1.x toolchain as the Go
applications it operates on.
* Refs boo#1248678
* Update to version 1.7.0:
* go.mod: update golang.org/x dependencies
* Update to version 1.6.0:
* go.mod: update golang.org/x dependencies
* Update to version 1.5.0:
* go.mod: update golang.org/x dependencies
* all: update to x/tools at 0602b30930e3
* Update to version 1.4.0:
* cmd/govulncheck: fix exit code propagation for wrapped scan errors
* go.mod: update golang.org/x dependencies
* go.mod: update golang.org/x dependencies
* Update to version 1.3.0:
* go.mod: update golang.org/x dependencies
* internal/scan: exit after printing version info
* Update to version 1.2.0:
* go.mod: update golang.org/x dependencies
* Update to version 1.1.4+git24.4ac723d:
* go.mod: update golang.org/x dependencies
* Update to version 1.1.4+git23.a9cf566:
* all: upgrade go directive to at least 1.25.0 [generated]
* go.mod: update golang.org/x dependencies
* vuln: add codereview.cfg
* cmd/govulncheck: remove gotypesalias.go (not needed anymore)
* internal/scan: improve error message for govulncheck
* go.mod: update golang.org/x dependencies
* go.mod: update golang.org/x dependencies
* go.mod: update golang.org/x dependencies
* go.mod: update golang.org/x dependencies
* go.mod: update golang.org/x dependencies
* cmd/govulncheck: use docker image with go 1.25
* all: upgrade go directive to at least 1.24.0 [generated]
* go.mod: update golang.org/x dependencies
* internal/buildinfo: stop testing the windows/arm port
* go.mod: update golang.org/x dependencies
* go.mod: update golang.org/x dependencies
* go.mod: update golang.org/x dependencies
* go.mod: update golang.org/x dependencies
* go.mod: update golang.org/x dependencies
* cmd/govulncheck/integration: update go version in Dockerfile
* all: upgrade go directive to at least 1.23.0 [generated]
* go.mod: update golang.org/x dependencies
* internal/vulncheck: add Unalias call
* Packaging improvements:
* Update to BuildRequires: golang(API) >= 1.26 latest stable. This tool
requires the latest stable Go toolchain to check other Go applications using
that latest stable version of Go.
* Refs boo#1248678
* _service tar_scm set revision to branch main until upstream next has a
tagged release
* _service tar_scm when revision is a branch name e.g. master use
versionformat @PARENT_TAG at +git@TAG_OFFSET at .%h to represent git commit
history included beyond last tagged release. Archive name will be:
name-X.Y.Z+gitN.shortsha.tar.gz. When upstream project resumes tagged
releases drop the param versionformat and restore revision to tag name e.g.
vX.Y.Z.
* Packaging improvements:
* Update to BuildRequires: golang(API) >= 1.25 latest stable. This tool
requires the latest stable Go toolchain to check other Go applications using
that latest stable version of Go.
* Refs boo#1248678
* Update to version 1.1.4:
* go.mod: update golang.org/x dependencies
* go.mod: update golang.org/x dependencies
* cmd/govulncheck: remove unnecessary fixups
* cmd/govulncheck: better mask new (sbom) versions
* cmd/govulncheck: mask dirty dependency versions
* cmd/govulncheck: add missing test data
* cmd/govulncheck: set gotypesalias=1 when using >=1.23 toolchain
* go.mod: update golang.org/x dependencies
* internal/sarif: use empty arrays instead of nils
* cmd/govulncheck/testdata: expand set of go versions in fixup
* cmd/govulncheck: remove unused fixup
* internal/scan: add amounts to sbom text output
* internal/scan: remove 'scanning n packages...' msg
* internal/scan: add SBOM to text output
* internal/vulncheck: pass SBOM to handlers
* go.mod: update golang.org/x dependencies
* internal/semver: add SemverToGoTag
* internal/govulncheck: add sbom message type
* internal/openvex: refactor PURL
* internal/openvex: populate product subcomponents
* internal/scan: do not show stacks in traces mode for binaries
* internal/scan: reorganize trace text layout in trace mode
* go.mod: update golang.org/x dependencies
* internal/vulncheck: remove use of ssautil.AllFunctions
* cmd/govulncheck: update test file for main module vulnerabilities
* cmd/govulncheck: add docs on detecting main module vulns
* go.mod: update golang.org/x dependencies
* cmd/govulncheck: update unit tests
* internal/vulncheck: properly check for main package vulns
* internal/vulncheck: explicitly exclude devel from affected ranges
* internal/vulncheck: consider main module when checking bin vulns
* internal/vulncheck: exclude dev go versions from ancient check
* Packaging improvements:
* Update to BuildRequires: golang(API) >= 1.22 matching go.mod
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* SUSE Linux Enterprise Server for SAP applications 16.0
zypper in -t patch SUSE-SLES-16.0-1852
* SUSE Linux Enterprise Server 16.0
zypper in -t patch SUSE-SLES-16.0-1852
## Package List:
* SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64)
* govulncheck-1.8.0-160000.1.1
* govulncheck-debuginfo-1.8.0-160000.1.1
* SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64)
* govulncheck-1.8.0-160000.1.1
* govulncheck-debuginfo-1.8.0-160000.1.1
## References:
* https://bugzilla.suse.com/show_bug.cgi?id=1248678
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.suse.com/pipermail/sle-updates/attachments/20261015/eab776cc/attachment.htm>
More information about the sle-updates
mailing list