SUSE-SU-2022:2004-1

Advisory lineage Upstream: 4 Downstream: 0
Published: 07 Jun 2022, 14:34
Last modified:04 Feb 2026, 02:42

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

07 Jun 2022, 14:34
Published
Vulnerability first disclosed
04 Feb 2026, 02:42
Last Modified
Vulnerability information updated

Description

Security update for go1.17 This update for go1.17 fixes the following issues: Update to go1.17.11 (released 2022-06-01) (bsc#1190649): - CVE-2022-30634: Fixed crypto/rand rand.Read hangs with extremely large buffers (bsc#1200134). - CVE-2022-30629: Fixed crypto/tls session tickets lack random ticket_age_add (bsc#1200135). - CVE-2022-29804: Fixed path/filepath Clean(`.\c:`) returns `c:` on Windows (bsc#1200137). - CVE-2022-30580: Fixed os/exec empty Cmd.Path can result in running unintended binary on Windows (bsc#1200136).

Affected Systems

  • opensuse•go1.17&distro=openSUSE Leap 15.3

    < 1.17.11-150000.1.37.1

  • opensuse•go1.17&distro=openSUSE Leap 15.4

    < 1.17.11-150000.1.37.1

  • suse•go1.17&distro=SUSE Linux Enterprise Module for Development Tools 15 SP3

    < 1.17.11-150000.1.37.1

  • suse•go1.17&distro=SUSE Linux Enterprise Module for Development Tools 15 SP4

    < 1.17.11-150000.1.37.1

References (10)