🛡️ SUSE-SU-2023:4709-1 — go1.21 (CVE-2023-45285 +2 more)

⚪ Unknown ✅ No Known Exploit OSV

N/A

CVSS Score

0 Low4 Medium7 High9 Critical10

Description

Security update for go1.21

This update for go1.21 fixes the following issues:

Update to go1.21.5:

CVE-2023-45285: cmd/go: git VCS qualifier in module path uses git:// scheme (bsc#1217834).
CVE-2023-45284: path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4 (bsc#1216943).
CVE-2023-39326: net/http: limit chunked data overhead (bsc#1217833).
cmd/go: go mod download needs to support toolchain upgrades
cmd/compile: invalid pointer found on stack when compiled with -race
os: NTFS deduped file changed from regular to irregular
net: TCPConn.ReadFrom hangs when io.Reader is TCPConn or UnixConn, Linux kernel < 5.1
cmd/compile: internal compiler error: panic during prove while compiling: unexpected induction with too many parents
syscall: TestOpenFileLimit unintentionally runs on non-Unix platforms
runtime: self-deadlock on mheap_.lock
crypto/rand: Legacy RtlGenRandom use on Windows

Affected software

SUSE-SU-2023:4709-1 is recorded against 1 package.

go1.21 (fixed in 1.21.5-150000.1.18.1)

Timeline and source

Published on 11 December 2023 and last revised on 4 February 2026. No public exploit is currently recorded for this entry. Record sourced from OSV.

References

www.suse.com (Advisory)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
www.suse.com (Web)
www.suse.com (Web)
www.suse.com (Web)

Details

Severity Unknown

CVSS Score N/A

CVSS Vector N/A

CWE N/A

Public Exploit ✅ No

Source OSV

Published 2023-12-11

Updated 2026-08-20

Modified 2026-02-04

Fix URL N/A

Affected Packages

Software	From version	Fixed in
go1.21	—	1.21.5-150000.1.18.1

References

ADVISORY https://www.suse.com/support/update/announcement/2023/suse-su-20234709-1/

REPORT https://bugzilla.suse.com/1212475

REPORT https://bugzilla.suse.com/1216943

REPORT https://bugzilla.suse.com/1217833

REPORT https://bugzilla.suse.com/1217834

WEB https://www.suse.com/security/cve/CVE-2023-39326

WEB https://www.suse.com/security/cve/CVE-2023-45284

WEB https://www.suse.com/security/cve/CVE-2023-45285

🔗 NVD 🔗 Mitre

Similar Threats

Free Vulnerability Check

Is your site affected by SUSE-SU-2023:4709-1?

BotEraser helps you identify potentially vulnerable plugins and themes by checking your installation against SUSE-SU-2023:4709-1 and other known CVE records.

Scan My Site Free →

No credit card required · Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.