gpp_maybe
Security update for go1.24
SUSE-SLE-Module-Development-Tools-15-SP7-2025-1846
This update for go1.24 fixes the following issues: go1.24.4 (released 2025-06-05) includes security fixes to the crypto/x509, net/http, and os packages, as well as bug fixes to the linker, the go command, and the hash/maphash and os packages. ( bsc#1236217 go1.24 release tracking CVE-2025-22874 CVE-2025-0913 CVE-2025-4673) * CVE-2025-22874: crypto/x509: ExtKeyUsageAny bypasses policy validation (bsc#1244158) * CVE-2025-0913: os: inconsistent handling of O_CREATE|O_EXCL on Unix and Windows (bsc#1244157) * CVE-2025-4673: net/http: sensitive headers not cleared on cross-origin redirect (bsc#1244156) * os: Root.Mkdir creates directories with zero permissions on OpenBSD * hash/maphash: hashing channels with purego impl. of maphash.Comparable panics * runtime/debug: BuildSetting does not document DefaultGODEBUG * cmd/go: add fips140 module selection mechanism * cmd/link: Go 1.24.3 and 1.23.9 regression - duplicated definition of symbol dlopen * CVE-2025-22873: os: Root permits access to parent directory
-
Release DateJun 9 2025
-
ReferencesBugzilla: 1242715, 1244157, 1244156, 1244158, 1236217
CVEs: CVE-2025-22874, CVE-2025-22873, CVE-2025-0913, CVE-2025-4673 -
Typesecurity
-
Severityimportant
cloud_download Downloads
Development Tools Module 15.7 s390x
-
Packagesgo1.24
A compiled, garbage-collected, concurrent programming languagego1.24-doc1.24.4-150000.1.26.1 lock rpm lock src
Go documentationgo1.24-race1.24.4-150000.1.26.1 lock rpm
Go runtime race detector1.24.4-150000.1.26.1 lock rpm
Development Tools Module 15.7 aarch64
-
Packagesgo1.24
A compiled, garbage-collected, concurrent programming languagego1.24-doc1.24.4-150000.1.26.1 lock rpm lock src
Go documentationgo1.24-race1.24.4-150000.1.26.1 lock rpm
Go runtime race detector1.24.4-150000.1.26.1 lock rpm
Development Tools Module 15.7 ppc64le
-
Packagesgo1.24
A compiled, garbage-collected, concurrent programming languagego1.24-doc1.24.4-150000.1.26.1 lock rpm lock src
Go documentationgo1.24-race1.24.4-150000.1.26.1 lock rpm
Go runtime race detector1.24.4-150000.1.26.1 lock rpm
Development Tools Module 15.7 x86_64
-
Packagesgo1.24
A compiled, garbage-collected, concurrent programming languagego1.24-doc1.24.4-150000.1.26.1 lock rpm lock src
Go documentationgo1.24-race1.24.4-150000.1.26.1 lock rpm
Go runtime race detector1.24.4-150000.1.26.1 lock rpm