SUSE-SU-2022:4398-1

Advisory lineage Upstream: 2 Downstream: 0
Published: 09 Dec 2022, 14:59
Last modified:04 Feb 2026, 03:49

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

09 Dec 2022, 14:59
Published
Vulnerability first disclosed
04 Feb 2026, 03:49
Last Modified
Vulnerability information updated

Description

Security update for go1.18 This update for go1.18 fixes the following issues: Update to version 1.18.9, includes the following security fixes: - CVE-2022-41717: net/http: limit canonical header cache by bytes, not entries (bsc#1206135) - CVE-2022-41720: os, net/http: avoid escapes from os.DirFS and http.Dir on Windows (bsc#1206134)

Affected Systems

  • opensuse•go1.18&distro=openSUSE Leap 15.3

    < 1.18.9-150000.1.40.1

  • opensuse•go1.18&distro=openSUSE Leap 15.4

    < 1.18.9-150000.1.40.1

  • suse•go1.18&distro=SUSE Linux Enterprise Module for Development Tools 15 SP3

    < 1.18.9-150000.1.40.1

  • suse•go1.18&distro=SUSE Linux Enterprise Module for Development Tools 15 SP4

    < 1.18.9-150000.1.40.1

References (6)