SUSE-SU-2022:1410-1

Advisory lineage Upstream: 3 Downstream: 0
Published: 26 Apr 2022, 15:48
Last modified:02 May 2025, 04:32

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

26 Apr 2022, 15:48
Published
Vulnerability first disclosed
02 May 2025, 04:32
Last Modified
Vulnerability information updated

Description

Security update for go1.18 This update for go1.18 fixes the following issues: - CVE-2022-24675: Fixed a stack overlow in Decode() in encoding/pem (bsc#1198423). - CVE-2022-28327: Fixed a crash due to refused oversized scalars in generic P-256 (bsc#1198424). - CVE-2022-27536: Fixed a crash in Certificate.Verify in crypto/x509 (bsc#1198427). Bump go1.18 (bsc#1193742)

Affected Systems

  • opensuse•go1.18&distro=openSUSE Leap 15.3

    < 1.18.1-150000.1.11.1

  • opensuse•go1.18&distro=openSUSE Leap 15.4

    < 1.18.1-150000.1.11.1

  • suse•go1.18&distro=SUSE Linux Enterprise Module for Development Tools 15 SP3

    < 1.18.1-150000.1.11.1

References (9)