FlawAtlas
Search the atlas
SUSE-SU-2022:1411-1 Not scored

Security update for go1.17

This update for go1.17 fixes the following issues: - Updated to version 1.17.9 (bsc#1190649): - CVE-2022-24675: Fixed a stack overflow via crafted PEM file (bsc#1198423). - CVE-2022-28327: Fixed a potential panic when using big P-256 scalars in the crypto/elliptic module (bsc#1198424).

Exploit probability Not scored
Published April 26, 2022
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise Module for Development Tools 15 SP3 go1.17
SUSE:Linux Enterprise Real Time 15 SP2 go1.17
openSUSE:Leap 15.3 go1.17
openSUSE:Leap 15.4 go1.17

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2022:1411-1

This update for go1.17 fixes the following issues: - Updated to version 1.17.9 (bsc#1190649): - CVE-2022-24675: Fixed a stack overflow via crafted PEM file (bsc#1198423). - CVE-2022-28327: Fixed a potential panic when using big P-256 scalars in the crypto/elliptic module (bsc#1198424).

View original source

05 / REFERENCES

Further evidence