Bugzilla – Bug 1216944
VUL-0: CVE-2023-45284: go1.20,go1.21: path/filepath: recognize device names with trailing spaces and superscripts
Last modified: 2024-06-10 09:16:27 UTC
The IsLocal function did not correctly detect reserved names in some cases: reserved names followed by spaces, such as "COM1 ". "COM" or "LPT" followed by a superscript 1, 2, or 3. IsLocal now correctly reports these names as non-local. This is CVE-2023-45284 and https://go.dev/issue/63713.
This is an autogenerated message for OBS integration: This bug (1216944) was mentioned in https://build.opensuse.org/request/show/1124118 Factory / go1.20 https://build.opensuse.org/request/show/1124119 Factory / go1.21
SUSE-SU-2023:4472-1: An update that solves five vulnerabilities can now be installed. Category: security (important) Bug References: 1206346, 1215985, 1216109, 1216943, 1216944 CVE References: CVE-2023-39323, CVE-2023-39325, CVE-2023-44487, CVE-2023-45283, CVE-2023-45284 Sources used: openSUSE Leap 15.4 (src): go1.20-openssl-1.20.11.1-150000.1.14.1 openSUSE Leap 15.5 (src): go1.20-openssl-1.20.11.1-150000.1.14.1 Development Tools Module 15-SP4 (src): go1.20-openssl-1.20.11.1-150000.1.14.1 Development Tools Module 15-SP5 (src): go1.20-openssl-1.20.11.1-150000.1.14.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2023:4471-1: An update that solves two vulnerabilities and has one security fix can now be installed. Category: security (moderate) Bug References: 1212475, 1216943, 1216944 CVE References: CVE-2023-45283, CVE-2023-45284 Sources used: openSUSE Leap 15.4 (src): go1.21-1.21.4-150000.1.15.1 openSUSE Leap 15.5 (src): go1.21-1.21.4-150000.1.15.1 Development Tools Module 15-SP4 (src): go1.21-1.21.4-150000.1.15.1 Development Tools Module 15-SP5 (src): go1.21-1.21.4-150000.1.15.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2023:4470-1: An update that solves two vulnerabilities and has one security fix can now be installed. Category: security (moderate) Bug References: 1206346, 1216943, 1216944 CVE References: CVE-2023-45283, CVE-2023-45284 Sources used: openSUSE Leap 15.4 (src): go1.20-1.20.11-150000.1.32.1 openSUSE Leap 15.5 (src): go1.20-1.20.11-150000.1.32.1 Development Tools Module 15-SP4 (src): go1.20-1.20.11-150000.1.32.1 Development Tools Module 15-SP5 (src): go1.20-1.20.11-150000.1.32.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2023:4469-1: An update that solves 10 vulnerabilities, contains one feature and has two security fixes can now be installed. Category: security (moderate) Bug References: 1212475, 1212667, 1212669, 1215084, 1215085, 1215086, 1215087, 1215090, 1215985, 1216109, 1216943, 1216944 CVE References: CVE-2023-39318, CVE-2023-39319, CVE-2023-39320, CVE-2023-39321, CVE-2023-39322, CVE-2023-39323, CVE-2023-39325, CVE-2023-44487, CVE-2023-45283, CVE-2023-45284 Jira References: SLE-18320 Sources used: openSUSE Leap 15.4 (src): go1.21-openssl-1.21.4.1-150000.1.5.1 openSUSE Leap 15.5 (src): go1.21-openssl-1.21.4.1-150000.1.5.1 Development Tools Module 15-SP4 (src): go1.21-openssl-1.21.4.1-150000.1.5.1 Development Tools Module 15-SP5 (src): go1.21-openssl-1.21.4.1-150000.1.5.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
done, closing