Wind River Support Network

HomeDefectsLINCD-10008

Fixed

LINCD-10008 : Security Advisory - go - CVE-2022-32190

Created: Aug 11, 2022 Updated: Oct 16, 2022

Resolved Date: Sep 26, 2022

Found In Version: 10.20.6.0

Fix Version: 10.22.41.0

Severity: Standard

Applicable for: Wind River Linux CD

Component/s: Userspace

Description

net/url: JoinPath doesn't strip relative path components in all circumstances

https://github.com/golang/go/issues/54385

CREATE(Triage):(User=admin) CVE-2022-32190 (https://nvd.nist.gov/vuln/detail/CVE-2022-32190)

CVEs

CVE-2022-32190