Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

SUSE: 2022:2672-1 Critical: Go1.18 Stack Overflow Resolution - Issues Fixed

suse
Calendar Grey August 4, 2022
Dist Suse Esm H88
An important SUSE patch for go1.18 resolves ten vulnerabilities and improves overall system safety.
An update that solves 10 vulnerabilities and has one errata is now available

Summary

This update for go1.18 fixes the following issues: Update to go version 1.18.5 (bsc#1193742): - CVE-2022-32189: encoding/gob, math/big: decoding big.Float and big.Rat can panic (bsc#1202035). - CVE-2022-1705: net/http: improper sanitization of Transfer-Encoding header (bsc#1201434) - CVE-2022-32148: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (bsc#1201436) - CVE-2022-30631: compress/gzip: stack exhaustion in Reader.Read (bsc#1201437). - CVE-2022-30633: encoding/xml: stack exhaustion in Unmarshal (bsc#1201440). - CVE-2022-28131: encoding/xml: stack exhaustion in Decoder.Skip (bsc#1201443). - CVE-2022-30635: encoding/gob: stack exhaustion in Decoder.Decode (bsc#1201444).

Topics%20covered

Topics Covered

security advisory software patch important system update SUSE stack exhaustion go programming

References

#1193742 #1201434 #1201436 #1201437 #1201440

#1201443 #1201444 #1201445 #1201447 #1201448

#1202035

Cross- CVE-2022-1705 CVE-2022-1962 CVE-2022-28131

CVE-2022-30630 CVE-2022-30631 CVE-2022-30632

CVE-2022-30633 CVE-2022-30635 CVE-2022-32148

CVE-2022-32189

CVSS scores:

CVE-2022-1705 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

CVE-2022-1962 (SUSE): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVE-2022-28131 (SUSE): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVE-2022-30630 (SUSE): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVE-2022-30631 (SUSE): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVE-2022-30632 (SUSE): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2022:2672-1
Rating: important

Topics%20covered

Topics Covered

security advisory software patch important system update SUSE stack exhaustion go programming

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here