CVE-2022-41720 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2022-41720 Interim 1 58 2026-03-05T04:36:41Z current 2022-12-08T00:40:12Z 2026-03-05T04:36:41Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2022-41720 On Windows, restricted files can be accessed via os.DirFS and http.Dir. The os.DirFS function and http.Dir type provide access to a tree of files rooted at a given directory. These functions permit access to Windows device files under that root. For example, os.DirFS("C:/tmp").Open("COM1") opens the COM1 device. Both os.DirFS and http.Dir only provide read-only filesystem access. In addition, on Windows, an os.DirFS for the directory (the root of the current drive) can permit a maliciously crafted path to escape from the drive and access any path on the system. With fix applied, the behavior of os.DirFS("") has changed. Previously, an empty root was treated equivalently to "/", so os.DirFS("").Open("tmp") would open the path "/tmp". This now returns an error. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2022-December/013247.html E-Mail link for SUSE-CU-2022:3385-1 https://lists.suse.com/pipermail/sle-security-updates/2022-December/013248.html E-Mail link for SUSE-CU-2022:3386-1 https://lists.suse.com/pipermail/sle-security-updates/2023-June/015197.html E-Mail link for SUSE-CU-2023:1897-1 https://lists.suse.com/pipermail/sle-security-updates/2023-March/014142.html E-Mail link for SUSE-CU-2023:776-1 https://lists.suse.com/pipermail/sle-security-updates/2023-March/014159.html E-Mail link for SUSE-CU-2023:785-1 https://lists.suse.com/pipermail/sle-security-updates/2023-March/014160.html E-Mail link for SUSE-CU-2023:789-1 https://lists.suse.com/pipermail/sle-security-updates/2023-March/014176.html E-Mail link for SUSE-CU-2023:802-1 https://lists.suse.com/pipermail/sle-security-updates/2022-December/013213.html E-Mail link for SUSE-SU-2022:4397-1 https://lists.suse.com/pipermail/sle-security-updates/2022-December/013214.html E-Mail link for SUSE-SU-2022:4398-1 https://lists.suse.com/pipermail/sle-security-updates/2023-March/014139.html E-Mail link for SUSE-SU-2023:0871-1 https://lists.suse.com/pipermail/sle-security-updates/2023-May/015005.html E-Mail link for SUSE-SU-2023:2312-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings Container bci/golang:1.18-18.52 Container bci/golang:oldstable-3.4 Container suse/hpc/warewulf4-x86_64/sle-hpc-node:15.7.20.5.1 Container suse/sle-micro/5.1/toolbox:13.2-3.8.1 Container suse/sle-micro/5.2/toolbox:13.2-7.8.1 Container suse/sle-micro/5.3/toolbox:13.2-6.8.1 Container suse/sle-micro/5.4/toolbox:13.2-5.15.1 Container suse/sle-micro/5.5/toolbox:14.2-3.12.3 Container suse/sle15:15.1.6.2.748 Container suse/sle15:15.2.9.5.277 Container suse/sle15:15.3.17.20.115 Container suse/sle15:15.4.27.14.42 Container suse/sle15:15.5.36.5.4 SUSE CaaS Platform 4.0 SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP6 SUSE Linux Enterprise Module for Containers 15 SP7 SUSE Linux Enterprise Real Time 15 SP3 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Server 15 SP4-TERADATA SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP6 SUSE Linux Enterprise Module for Containers 15 SP7 SUSE Linux Enterprise Server Business Critical Linux 15 SP2 SUSE Linux Enterprise Server Business Critical Linux 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP6 SUSE Linux Enterprise Module for Containers 15 SP7 SUSE Manager Proxy 4.1 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Manager Retail Branch Server 4.1 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Manager Server 4.1 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Leap 15.5 openSUSE Tumbleweed container-suseconnect-2.4.0-150000.4.24.1 go1.17 go1.17-doc go1.17-race go1.18 go1.18-1.18.9-1.1 go1.18-1.18.9-150000.1.40.1 go1.18-doc go1.18-doc-1.18.9-1.1 go1.18-doc-1.18.9-150000.1.40.1 go1.18-openssl-1.18.10.1-150000.1.9.1 go1.18-openssl-doc-1.18.10.1-150000.1.9.1 go1.18-openssl-race-1.18.10.1-150000.1.9.1 go1.18-race go1.18-race-1.18.9-1.1 go1.18-race-1.18.9-150000.1.40.1 go1.19 go1.19-1.19.4-1.1 go1.19-1.19.4-150000.1.18.1 go1.19-doc go1.19-doc-1.19.4-1.1 go1.19-doc-1.19.4-150000.1.18.1 go1.19-race go1.19-race-1.19.4-1.1 go1.19-race-1.19.4-150000.1.18.1 go1.18-1.18.9-150000.1.40.1 as a component of Container bci/golang:1.18-18.52 go1.19-1.19.4-150000.1.18.1 as a component of Container bci/golang:oldstable-3.4 container-suseconnect-2.4.0-150000.4.24.1 as a component of Container suse/hpc/warewulf4-x86_64/sle-hpc-node:15.7.20.5.1 container-suseconnect-2.4.0-150000.4.24.1 as a component of Container suse/sle-micro/5.1/toolbox:13.2-3.8.1 container-suseconnect-2.4.0-150000.4.24.1 as a component of Container suse/sle-micro/5.2/toolbox:13.2-7.8.1 container-suseconnect-2.4.0-150000.4.24.1 as a component of Container suse/sle-micro/5.3/toolbox:13.2-6.8.1 container-suseconnect-2.4.0-150000.4.24.1 as a component of Container suse/sle-micro/5.4/toolbox:13.2-5.15.1 container-suseconnect-2.4.0-150000.4.24.1 as a component of Container suse/sle-micro/5.5/toolbox:14.2-3.12.3 container-suseconnect-2.4.0-150000.4.24.1 as a component of Container suse/sle15:15.1.6.2.748 container-suseconnect-2.4.0-150000.4.24.1 as a component of Container suse/sle15:15.2.9.5.277 container-suseconnect-2.4.0-150000.4.24.1 as a component of Container suse/sle15:15.3.17.20.115 container-suseconnect-2.4.0-150000.4.24.1 as a component of Container suse/sle15:15.4.27.14.42 container-suseconnect-2.4.0-150000.4.24.1 as a component of Container suse/sle15:15.5.36.5.4 container-suseconnect-2.4.0-150000.4.24.1 as a component of SUSE CaaS Platform 4.0 container-suseconnect-2.4.0-150000.4.24.1 as a component of SUSE Enterprise Storage 7 container-suseconnect-2.4.0-150000.4.24.1 as a component of SUSE Enterprise Storage 7.1 go1.18-openssl-1.18.10.1-150000.1.9.1 as a component of SUSE Enterprise Storage 7.1 go1.18-openssl-doc-1.18.10.1-150000.1.9.1 as a component of SUSE Enterprise Storage 7.1 go1.18-openssl-race-1.18.10.1-150000.1.9.1 as a component of SUSE Enterprise Storage 7.1 container-suseconnect-2.4.0-150000.4.24.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS container-suseconnect-2.4.0-150000.4.24.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS container-suseconnect-2.4.0-150000.4.24.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS go1.18-openssl-1.18.10.1-150000.1.9.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS go1.18-openssl-doc-1.18.10.1-150000.1.9.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS go1.18-openssl-race-1.18.10.1-150000.1.9.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS container-suseconnect-2.4.0-150000.4.24.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS go1.18-openssl-1.18.10.1-150000.1.9.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS go1.18-openssl-doc-1.18.10.1-150000.1.9.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS go1.18-openssl-race-1.18.10.1-150000.1.9.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS container-suseconnect-2.4.0-150000.4.24.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP4 container-suseconnect-2.4.0-150000.4.24.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP5 container-suseconnect-2.4.0-150000.4.24.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP6 container-suseconnect-2.4.0-150000.4.24.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP7 go1.18-1.18.9-150000.1.40.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP3 go1.18-doc-1.18.9-150000.1.40.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP3 go1.18-race-1.18.9-150000.1.40.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP3 go1.19-1.19.4-150000.1.18.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP3 go1.19-doc-1.19.4-150000.1.18.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP3 go1.19-race-1.19.4-150000.1.18.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP3 go1.18-1.18.9-150000.1.40.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 go1.18-doc-1.18.9-150000.1.40.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 go1.18-openssl-1.18.10.1-150000.1.9.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 go1.18-openssl-doc-1.18.10.1-150000.1.9.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 go1.18-openssl-race-1.18.10.1-150000.1.9.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 go1.18-race-1.18.9-150000.1.40.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 go1.19-1.19.4-150000.1.18.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 go1.19-doc-1.19.4-150000.1.18.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 go1.19-race-1.19.4-150000.1.18.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 go1.19-1.19.4-150000.1.18.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 go1.19-doc-1.19.4-150000.1.18.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 go1.19-race-1.19.4-150000.1.18.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 go1.18-openssl-1.18.10.1-150000.1.9.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 go1.18-openssl-doc-1.18.10.1-150000.1.9.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 go1.18-openssl-race-1.18.10.1-150000.1.9.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 container-suseconnect-2.4.0-150000.4.24.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS container-suseconnect-2.4.0-150000.4.24.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS container-suseconnect-2.4.0-150000.4.24.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS go1.18-openssl-1.18.10.1-150000.1.9.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS go1.18-openssl-doc-1.18.10.1-150000.1.9.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS go1.18-openssl-race-1.18.10.1-150000.1.9.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS go1.18-1.18.9-150000.1.40.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA go1.18-doc-1.18.9-150000.1.40.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA go1.18-openssl-1.18.10.1-150000.1.9.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA go1.18-openssl-doc-1.18.10.1-150000.1.9.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA go1.18-openssl-race-1.18.10.1-150000.1.9.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA go1.18-race-1.18.9-150000.1.40.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA go1.19-1.19.4-150000.1.18.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA go1.19-doc-1.19.4-150000.1.18.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA go1.19-race-1.19.4-150000.1.18.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA container-suseconnect-2.4.0-150000.4.24.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 container-suseconnect-2.4.0-150000.4.24.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 container-suseconnect-2.4.0-150000.4.24.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 go1.18-openssl-1.18.10.1-150000.1.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 go1.18-openssl-doc-1.18.10.1-150000.1.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 go1.18-openssl-race-1.18.10.1-150000.1.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 go1.18-1.18.9-150000.1.40.1 as a component of openSUSE Leap 15.3 go1.18-doc-1.18.9-150000.1.40.1 as a component of openSUSE Leap 15.3 go1.18-race-1.18.9-150000.1.40.1 as a component of openSUSE Leap 15.3 go1.19-1.19.4-150000.1.18.1 as a component of openSUSE Leap 15.3 go1.19-doc-1.19.4-150000.1.18.1 as a component of openSUSE Leap 15.3 go1.19-race-1.19.4-150000.1.18.1 as a component of openSUSE Leap 15.3 go1.18-1.18.9-150000.1.40.1 as a component of openSUSE Leap 15.4 go1.18-doc-1.18.9-150000.1.40.1 as a component of openSUSE Leap 15.4 go1.18-openssl-1.18.10.1-150000.1.9.1 as a component of openSUSE Leap 15.4 go1.18-openssl-doc-1.18.10.1-150000.1.9.1 as a component of openSUSE Leap 15.4 go1.18-openssl-race-1.18.10.1-150000.1.9.1 as a component of openSUSE Leap 15.4 go1.18-race-1.18.9-150000.1.40.1 as a component of openSUSE Leap 15.4 go1.19-1.19.4-150000.1.18.1 as a component of openSUSE Leap 15.4 go1.19-doc-1.19.4-150000.1.18.1 as a component of openSUSE Leap 15.4 go1.19-race-1.19.4-150000.1.18.1 as a component of openSUSE Leap 15.4 go1.18-openssl-1.18.10.1-150000.1.9.1 as a component of openSUSE Leap 15.5 go1.18-openssl-doc-1.18.10.1-150000.1.9.1 as a component of openSUSE Leap 15.5 go1.18-openssl-race-1.18.10.1-150000.1.9.1 as a component of openSUSE Leap 15.5 go1.18-1.18.9-1.1 as a component of openSUSE Tumbleweed go1.18-doc-1.18.9-1.1 as a component of openSUSE Tumbleweed go1.18-race-1.18.9-1.1 as a component of openSUSE Tumbleweed go1.19-1.19.4-1.1 as a component of openSUSE Tumbleweed go1.19-doc-1.19.4-1.1 as a component of openSUSE Tumbleweed go1.19-race-1.19.4-1.1 as a component of openSUSE Tumbleweed go1.17 as a component of SUSE Enterprise Storage 7 go1.17 as a component of SUSE Enterprise Storage 7.1 go1.17-doc as a component of SUSE Enterprise Storage 7.1 go1.17-race as a component of SUSE Enterprise Storage 7.1 go1.18 as a component of SUSE Enterprise Storage 7.1 go1.18-doc as a component of SUSE Enterprise Storage 7.1 go1.18-race as a component of SUSE Enterprise Storage 7.1 go1.19 as a component of SUSE Enterprise Storage 7.1 go1.19-doc as a component of SUSE Enterprise Storage 7.1 go1.19-race as a component of SUSE Enterprise Storage 7.1 go1.17 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS go1.17-doc as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS go1.17-race as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS go1.17 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS go1.17-doc as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS go1.17-race as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS go1.17 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS go1.17-doc as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS go1.17-race as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS go1.18 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS go1.18-doc as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS go1.18-race as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS go1.19 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS go1.19-doc as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS go1.19-race as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS go1.17 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS go1.17-doc as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS go1.17-race as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS go1.18 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS go1.18-doc as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS go1.18-race as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS go1.19 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS go1.19-doc as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS go1.19-race as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS go1.17 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP3 go1.17-doc as a component of SUSE Linux Enterprise Module for Development Tools 15 SP3 go1.17-race as a component of SUSE Linux Enterprise Module for Development Tools 15 SP3 go1.17 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 go1.17-doc as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 go1.17-race as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 go1.17 as a component of SUSE Linux Enterprise Real Time 15 SP3 go1.17-doc as a component of SUSE Linux Enterprise Real Time 15 SP3 go1.17-race as a component of SUSE Linux Enterprise Real Time 15 SP3 go1.18 as a component of SUSE Linux Enterprise Real Time 15 SP3 go1.18-doc as a component of SUSE Linux Enterprise Real Time 15 SP3 go1.18-race as a component of SUSE Linux Enterprise Real Time 15 SP3 go1.19 as a component of SUSE Linux Enterprise Real Time 15 SP3 go1.19-doc as a component of SUSE Linux Enterprise Real Time 15 SP3 go1.19-race as a component of SUSE Linux Enterprise Real Time 15 SP3 go1.17 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS go1.17-doc as a component of SUSE Linux Enterprise Server 15 SP2-LTSS go1.17-race as a component of SUSE Linux Enterprise Server 15 SP2-LTSS go1.17 as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP2 go1.17 as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP3 go1.18 as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP3 go1.19 as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP3 go1.17 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 go1.17-doc as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 go1.17-race as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 go1.17 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 go1.17-doc as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 go1.17-race as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 go1.18 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 go1.18-doc as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 go1.18-race as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 go1.19 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 go1.19-doc as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 go1.19-race as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 go1.17 as a component of SUSE Manager Proxy 4.1 go1.17 as a component of SUSE Manager Retail Branch Server 4.1 go1.17 as a component of SUSE Manager Server 4.1 On Windows, restricted files can be accessed via os.DirFS and http.Dir. The os.DirFS function and http.Dir type provide access to a tree of files rooted at a given directory. These functions permit access to Windows device files under that root. For example, os.DirFS("C:/tmp").Open("COM1") opens the COM1 device. Both os.DirFS and http.Dir only provide read-only filesystem access. In addition, on Windows, an os.DirFS for the directory (the root of the current drive) can permit a maliciously crafted path to escape from the drive and access any path on the system. With fix applied, the behavior of os.DirFS("") has changed. Previously, an empty root was treated equivalently to "/", so os.DirFS("").Open("tmp") would open the path "/tmp". This now returns an error. CVE-2022-41720 Container bci/golang:1.18-18.52:go1.18-1.18.9-150000.1.40.1 Container bci/golang:oldstable-3.4:go1.19-1.19.4-150000.1.18.1 Container suse/hpc/warewulf4-x86_64/sle-hpc-node:15.7.20.5.1:container-suseconnect-2.4.0-150000.4.24.1 Container suse/sle-micro/5.1/toolbox:13.2-3.8.1:container-suseconnect-2.4.0-150000.4.24.1 Container suse/sle-micro/5.2/toolbox:13.2-7.8.1:container-suseconnect-2.4.0-150000.4.24.1 Container suse/sle-micro/5.3/toolbox:13.2-6.8.1:container-suseconnect-2.4.0-150000.4.24.1 Container suse/sle-micro/5.4/toolbox:13.2-5.15.1:container-suseconnect-2.4.0-150000.4.24.1 Container suse/sle-micro/5.5/toolbox:14.2-3.12.3:container-suseconnect-2.4.0-150000.4.24.1 Container suse/sle15:15.1.6.2.748:container-suseconnect-2.4.0-150000.4.24.1 Container suse/sle15:15.2.9.5.277:container-suseconnect-2.4.0-150000.4.24.1 Container suse/sle15:15.3.17.20.115:container-suseconnect-2.4.0-150000.4.24.1 Container suse/sle15:15.4.27.14.42:container-suseconnect-2.4.0-150000.4.24.1 Container suse/sle15:15.5.36.5.4:container-suseconnect-2.4.0-150000.4.24.1 SUSE CaaS Platform 4.0:container-suseconnect-2.4.0-150000.4.24.1 SUSE Enterprise Storage 7:container-suseconnect-2.4.0-150000.4.24.1 SUSE Enterprise Storage 7.1:container-suseconnect-2.4.0-150000.4.24.1 SUSE Enterprise Storage 7.1:go1.18-openssl-1.18.10.1-150000.1.9.1 SUSE Enterprise Storage 7.1:go1.18-openssl-doc-1.18.10.1-150000.1.9.1 SUSE Enterprise Storage 7.1:go1.18-openssl-race-1.18.10.1-150000.1.9.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:container-suseconnect-2.4.0-150000.4.24.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:container-suseconnect-2.4.0-150000.4.24.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:container-suseconnect-2.4.0-150000.4.24.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:go1.18-openssl-1.18.10.1-150000.1.9.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:go1.18-openssl-doc-1.18.10.1-150000.1.9.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:go1.18-openssl-race-1.18.10.1-150000.1.9.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:container-suseconnect-2.4.0-150000.4.24.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:go1.18-openssl-1.18.10.1-150000.1.9.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:go1.18-openssl-doc-1.18.10.1-150000.1.9.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:go1.18-openssl-race-1.18.10.1-150000.1.9.1 SUSE Linux Enterprise Module for Containers 15 SP4:container-suseconnect-2.4.0-150000.4.24.1 SUSE Linux Enterprise Module for Containers 15 SP5:container-suseconnect-2.4.0-150000.4.24.1 SUSE Linux Enterprise Module for Containers 15 SP6:container-suseconnect-2.4.0-150000.4.24.1 SUSE Linux Enterprise Module for Containers 15 SP7:container-suseconnect-2.4.0-150000.4.24.1 SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.18-1.18.9-150000.1.40.1 SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.18-doc-1.18.9-150000.1.40.1 SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.18-race-1.18.9-150000.1.40.1 SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.19-1.19.4-150000.1.18.1 SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.19-doc-1.19.4-150000.1.18.1 SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.19-race-1.19.4-150000.1.18.1 SUSE Linux Enterprise Module for Development Tools 15 SP4:go1.18-1.18.9-150000.1.40.1 SUSE Linux Enterprise Module for Development Tools 15 SP4:go1.18-doc-1.18.9-150000.1.40.1 SUSE Linux Enterprise Module for Development Tools 15 SP4:go1.18-openssl-1.18.10.1-150000.1.9.1 SUSE Linux Enterprise Module for Development Tools 15 SP4:go1.18-openssl-doc-1.18.10.1-150000.1.9.1 SUSE Linux Enterprise Module for Development Tools 15 SP4:go1.18-openssl-race-1.18.10.1-150000.1.9.1 SUSE Linux Enterprise Module for Development Tools 15 SP4:go1.18-race-1.18.9-150000.1.40.1 SUSE Linux Enterprise Module for Development Tools 15 SP4:go1.19-1.19.4-150000.1.18.1 SUSE Linux Enterprise Module for Development Tools 15 SP4:go1.19-doc-1.19.4-150000.1.18.1 SUSE Linux Enterprise Module for Development Tools 15 SP4:go1.19-race-1.19.4-150000.1.18.1 SUSE Linux Enterprise Module for Development Tools 15 SP5:go1.19-1.19.4-150000.1.18.1 SUSE Linux Enterprise Module for Development Tools 15 SP5:go1.19-doc-1.19.4-150000.1.18.1 SUSE Linux Enterprise Module for Development Tools 15 SP5:go1.19-race-1.19.4-150000.1.18.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP5:go1.18-1.18.9-150000.1.40.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP5:go1.18-doc-1.18.9-150000.1.40.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP5:go1.18-race-1.18.9-150000.1.40.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP6:go1.18-1.18.9-150000.1.40.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP6:go1.18-doc-1.18.9-150000.1.40.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP6:go1.18-openssl-1.18.10.1-150000.1.9.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP6:go1.18-openssl-doc-1.18.10.1-150000.1.9.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP6:go1.18-openssl-race-1.18.10.1-150000.1.9.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP6:go1.18-race-1.18.9-150000.1.40.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP6:go1.19-1.19.4-150000.1.18.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP6:go1.19-doc-1.19.4-150000.1.18.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP6:go1.19-race-1.19.4-150000.1.18.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:go1.18-1.18.9-150000.1.40.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:go1.18-doc-1.18.9-150000.1.40.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:go1.18-openssl-1.18.10.1-150000.1.9.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:go1.18-openssl-doc-1.18.10.1-150000.1.9.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:go1.18-openssl-race-1.18.10.1-150000.1.9.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:go1.18-race-1.18.9-150000.1.40.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:go1.19-1.19.4-150000.1.18.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:go1.19-doc-1.19.4-150000.1.18.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:go1.19-race-1.19.4-150000.1.18.1 SUSE Linux Enterprise Real Time 15 SP3:go1.18-openssl-1.18.10.1-150000.1.9.1 SUSE Linux Enterprise Real Time 15 SP3:go1.18-openssl-doc-1.18.10.1-150000.1.9.1 SUSE Linux Enterprise Real Time 15 SP3:go1.18-openssl-race-1.18.10.1-150000.1.9.1 SUSE Linux Enterprise Server 15 SP1-LTSS:container-suseconnect-2.4.0-150000.4.24.1 SUSE Linux Enterprise Server 15 SP2-LTSS:container-suseconnect-2.4.0-150000.4.24.1 SUSE Linux Enterprise Server 15 SP3-LTSS:container-suseconnect-2.4.0-150000.4.24.1 SUSE Linux Enterprise Server 15 SP3-LTSS:go1.18-openssl-1.18.10.1-150000.1.9.1 SUSE Linux Enterprise Server 15 SP3-LTSS:go1.18-openssl-doc-1.18.10.1-150000.1.9.1 SUSE Linux Enterprise Server 15 SP3-LTSS:go1.18-openssl-race-1.18.10.1-150000.1.9.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:go1.18-1.18.9-150000.1.40.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:go1.18-doc-1.18.9-150000.1.40.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:go1.18-openssl-1.18.10.1-150000.1.9.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:go1.18-openssl-doc-1.18.10.1-150000.1.9.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:go1.18-openssl-race-1.18.10.1-150000.1.9.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:go1.18-race-1.18.9-150000.1.40.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:go1.19-1.19.4-150000.1.18.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:go1.19-doc-1.19.4-150000.1.18.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:go1.19-race-1.19.4-150000.1.18.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:container-suseconnect-2.4.0-150000.4.24.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:container-suseconnect-2.4.0-150000.4.24.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:container-suseconnect-2.4.0-150000.4.24.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:go1.18-openssl-1.18.10.1-150000.1.9.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:go1.18-openssl-doc-1.18.10.1-150000.1.9.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:go1.18-openssl-race-1.18.10.1-150000.1.9.1 openSUSE Leap 15.3:go1.18-1.18.9-150000.1.40.1 openSUSE Leap 15.3:go1.18-doc-1.18.9-150000.1.40.1 openSUSE Leap 15.3:go1.18-race-1.18.9-150000.1.40.1 openSUSE Leap 15.3:go1.19-1.19.4-150000.1.18.1 openSUSE Leap 15.3:go1.19-doc-1.19.4-150000.1.18.1 openSUSE Leap 15.3:go1.19-race-1.19.4-150000.1.18.1 openSUSE Leap 15.4:go1.18-1.18.9-150000.1.40.1 openSUSE Leap 15.4:go1.18-doc-1.18.9-150000.1.40.1 openSUSE Leap 15.4:go1.18-openssl-1.18.10.1-150000.1.9.1 openSUSE Leap 15.4:go1.18-openssl-doc-1.18.10.1-150000.1.9.1 openSUSE Leap 15.4:go1.18-openssl-race-1.18.10.1-150000.1.9.1 openSUSE Leap 15.4:go1.18-race-1.18.9-150000.1.40.1 openSUSE Leap 15.4:go1.19-1.19.4-150000.1.18.1 openSUSE Leap 15.4:go1.19-doc-1.19.4-150000.1.18.1 openSUSE Leap 15.4:go1.19-race-1.19.4-150000.1.18.1 openSUSE Leap 15.5:go1.18-openssl-1.18.10.1-150000.1.9.1 openSUSE Leap 15.5:go1.18-openssl-doc-1.18.10.1-150000.1.9.1 openSUSE Leap 15.5:go1.18-openssl-race-1.18.10.1-150000.1.9.1 openSUSE Tumbleweed:go1.18-1.18.9-1.1 openSUSE Tumbleweed:go1.18-doc-1.18.9-1.1 openSUSE Tumbleweed:go1.18-race-1.18.9-1.1 openSUSE Tumbleweed:go1.19-1.19.4-1.1 openSUSE Tumbleweed:go1.19-doc-1.19.4-1.1 openSUSE Tumbleweed:go1.19-race-1.19.4-1.1 SUSE Enterprise Storage 7.1:go1.17 SUSE Enterprise Storage 7.1:go1.17-doc SUSE Enterprise Storage 7.1:go1.17-race SUSE Enterprise Storage 7.1:go1.18 SUSE Enterprise Storage 7.1:go1.18-doc SUSE Enterprise Storage 7.1:go1.18-race SUSE Enterprise Storage 7.1:go1.19 SUSE Enterprise Storage 7.1:go1.19-doc SUSE Enterprise Storage 7.1:go1.19-race SUSE Enterprise Storage 7:go1.17 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.17 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.17-doc SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.17-race SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.17 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.17-doc SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.17-race SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:go1.17 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:go1.17-doc SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:go1.17-race SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:go1.18 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:go1.18-doc SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:go1.18-race SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:go1.19 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:go1.19-doc SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:go1.19-race SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:go1.17 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:go1.17-doc SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:go1.17-race SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:go1.18 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:go1.18-doc SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:go1.18-race SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:go1.19 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:go1.19-doc SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:go1.19-race SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.17 SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.17-doc SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.17-race SUSE Linux Enterprise Module for Development Tools 15 SP4:go1.17 SUSE Linux Enterprise Module for Development Tools 15 SP4:go1.17-doc SUSE Linux Enterprise Module for Development Tools 15 SP4:go1.17-race SUSE Linux Enterprise Real Time 15 SP3:go1.17 SUSE Linux Enterprise Real Time 15 SP3:go1.17-doc SUSE Linux Enterprise Real Time 15 SP3:go1.17-race SUSE Linux Enterprise Real Time 15 SP3:go1.18 SUSE Linux Enterprise Real Time 15 SP3:go1.18-doc SUSE Linux Enterprise Real Time 15 SP3:go1.18-race SUSE Linux Enterprise Real Time 15 SP3:go1.19 SUSE Linux Enterprise Real Time 15 SP3:go1.19-doc SUSE Linux Enterprise Real Time 15 SP3:go1.19-race SUSE Linux Enterprise Server 15 SP2-LTSS:go1.17 SUSE Linux Enterprise Server 15 SP2-LTSS:go1.17-doc SUSE Linux Enterprise Server 15 SP2-LTSS:go1.17-race SUSE Linux Enterprise Server Business Critical Linux 15 SP2:go1.17 SUSE Linux Enterprise Server Business Critical Linux 15 SP3:go1.17 SUSE Linux Enterprise Server Business Critical Linux 15 SP3:go1.18 SUSE Linux Enterprise Server Business Critical Linux 15 SP3:go1.19 SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.17 SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.17-doc SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.17-race SUSE Linux Enterprise Server for SAP Applications 15 SP3:go1.17 SUSE Linux Enterprise Server for SAP Applications 15 SP3:go1.17-doc SUSE Linux Enterprise Server for SAP Applications 15 SP3:go1.17-race SUSE Linux Enterprise Server for SAP Applications 15 SP3:go1.18 SUSE Linux Enterprise Server for SAP Applications 15 SP3:go1.18-doc SUSE Linux Enterprise Server for SAP Applications 15 SP3:go1.18-race SUSE Linux Enterprise Server for SAP Applications 15 SP3:go1.19 SUSE Linux Enterprise Server for SAP Applications 15 SP3:go1.19-doc SUSE Linux Enterprise Server for SAP Applications 15 SP3:go1.19-race SUSE Manager Proxy 4.1:go1.17 SUSE Manager Retail Branch Server 4.1:go1.17 SUSE Manager Server 4.1:go1.17 important 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N