SUSE-SU-2023:2525-1: go1.19&distro=openSUSE Leap 15.4
Vulnerability summary
SUSE-SU-2023:2525-1 is a vulnerability in go1.19&distro=openSUSE Leap 15.4 with no CVSS score yet.
Advisory lineage
Upstream 4 · Downstream 0 · Related 4Timeline
- 16-06-2023PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for go1.19 This update for go1.19 fixes the following issues: Update to go1.19.10 (bsc#1200441): - CVE-2023-29402: cmd/go: Fixed cgo code injection (bsc#1212073). - CVE-2023-29403: runtime: Fixed unexpected behavior of setuid/setgid binaries (bsc#1212074). - CVE-2023-29404: cmd/go: Fixed improper sanitization of LDFLAGS (bsc#1212075). - CVE-2023-29405: cmd/go: Fixed improper sanitization of LDFLAGS (bsc#1212076).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse3 products
- go1.19&distro=SUSE Linux Enterprise Module for Development Tools 15 SP4< 1.19.10-150000.1.34.1
- go1.19&distro=SUSE Linux Enterprise Module for Development Tools 15 SP5< 1.19.10-150000.1.34.1
- go1.19&distro=SUSE Linux Enterprise Real Time 15 SP3< 1.19.10-150000.1.34.1
Opensuse2 products
- go1.19&distro=openSUSE Leap 15.4< 1.19.10-150000.1.34.1
- go1.19&distro=openSUSE Leap 15.5< 1.19.10-150000.1.34.1
2 vendors · 5 products