SUSE-SU-2022:4397-1

Advisory lineage Upstream: 2 Downstream: 0
Published: 09 Dec 2022, 14:59
Last modified:04 Feb 2026, 03:03

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

09 Dec 2022, 14:59
Published
Vulnerability first disclosed
04 Feb 2026, 03:03
Last Modified
Vulnerability information updated

Description

Security update for go1.19 This update for go1.19 fixes the following issues: Update to version 1.19.4, includes the following security fixes: - CVE-2022-41717: net/http: limit canonical header cache by bytes, not entries (bsc#1206135). - CVE-2022-41720: os, net/http: avoid escapes from os.DirFS and http.Dir on Windows (bsc#1206134).

Affected Systems

  • opensuse•go1.19&distro=openSUSE Leap 15.3

    < 1.19.4-150000.1.18.1

  • opensuse•go1.19&distro=openSUSE Leap 15.4

    < 1.19.4-150000.1.18.1

  • suse•go1.19&distro=SUSE Linux Enterprise Module for Development Tools 15 SP3

    < 1.19.4-150000.1.18.1

  • suse•go1.19&distro=SUSE Linux Enterprise Module for Development Tools 15 SP4

    < 1.19.4-150000.1.18.1

References (6)