Security update for go1.18
This update for go1.18 fixes the following issues: - CVE-2022-24675: Fixed a stack overlow in Decode() in encoding/pem (bsc#1198423). - CVE-2022-28327: Fixed a crash due to refused oversized scalars in generic P-256 (bsc#1198424). - CVE-2022-27536: Fixed a crash in Certificate.Verify in crypto/x509 (bsc#1198427). Bump go1.18 (bsc#1193742)
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for go1.18 fixes the following issues: - CVE-2022-24675: Fixed a stack overlow in Decode() in encoding/pem (bsc#1198423). - CVE-2022-28327: Fixed a crash due to refused oversized scalars in generic P-256 (bsc#1198424). - CVE-2022-27536: Fixed a crash in Certificate.Verify in crypto/x509 (bsc#1198427). Bump go1.18 (bsc#1193742)
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1183043
- https://bugzilla.suse.com/1193742
- https://bugzilla.suse.com/1198423
- https://bugzilla.suse.com/1198424
- https://bugzilla.suse.com/1198427
- https://www.suse.com/security/cve/CVE-2022-24675
- https://www.suse.com/security/cve/CVE-2022-27536
- https://www.suse.com/security/cve/CVE-2022-28327
- https://www.suse.com/support/update/announcement/2022/suse-su-20221410-1/