gpp_maybe Security update for go1.24

SUSE-SLE-Module-Development-Tools-15-SP7-2026-219

This update for go1.24 fixes the following issues: Update to go1.24.12 (released 2026-01-15) (bsc#1236217) Security fixes: - CVE-2025-61730: crypto/tls: handshake messages may be processed at the incorrect encryption level (bsc#1256821). - CVE-2025-68119: cmd/go: unexpected code execution when invoking toolchain (bsc#1256820). - CVE-2025-61731: cmd/go: bypass of flag sanitization can lead to arbitrary code execution (bsc#1256819). - CVE-2025-61726: net/http: memory exhaustion in Request.ParseForm (bsc#1256817). - CVE-2025-61728: archive/zip: denial of service when parsing arbitrary ZIP archives (bsc#1256816). - CVE-2025-68121: crypto/tls: Config.Clone copies automatically generated session ticket keys, session resumption does not account for the expiration of full certificate chain (bsc#1256818). Other fixes: * go#76408 crypto/tls: earlyTrafficSecret should use ClientHelloInner if ECH enabled * go#76624 os: on Unix, Readdirnames skips directory entries with zero inodes * go#76760 runtime: stack split at bad time in os/signal with Go 1.25.4 windows 386 * go#76796 runtime: race detector crash on ppc64le * go#76966 cmd/compile/internal/ssa: Compile.func1(): panic during sccp while compiling <function>: runtime error: index out of range

• Release Date
  Jan 22 2026
• References
  Bugzilla: 1256816, 1236217, 1256820, 1256817, 1256821, 1256819, 1256818
  CVEs: CVE-2025-61726, CVE-2025-68121, CVE-2025-61730, CVE-2025-68119, CVE-2025-61731, CVE-2025-61728
• Type
  security
• Severity
  important

cloud_download Downloads

Development Tools Module 15.7 ppc64le

• Packages
  go1.24
  A compiled, garbage-collected, concurrent programming language

  1.24.12-150000.1.53.1 lock rpm lock src

  go1.24-doc
  Go documentation

  1.24.12-150000.1.53.1 lock rpm

  go1.24-race
  Go runtime race detector

  1.24.12-150000.1.53.1 lock rpm

Development Tools Module 15.7 s390x

• Packages
  go1.24
  A compiled, garbage-collected, concurrent programming language

  1.24.12-150000.1.53.1 lock rpm lock src

  go1.24-doc
  Go documentation

  1.24.12-150000.1.53.1 lock rpm

  go1.24-race
  Go runtime race detector

  1.24.12-150000.1.53.1 lock rpm

Development Tools Module 15.7 aarch64

• Packages
  go1.24
  A compiled, garbage-collected, concurrent programming language

  1.24.12-150000.1.53.1 lock rpm lock src

  go1.24-doc
  Go documentation

  1.24.12-150000.1.53.1 lock rpm

  go1.24-race
  Go runtime race detector

  1.24.12-150000.1.53.1 lock rpm

Development Tools Module 15.7 x86_64

• Packages
  go1.24
  A compiled, garbage-collected, concurrent programming language

  1.24.12-150000.1.53.1 lock rpm lock src

  go1.24-doc
  Go documentation

  1.24.12-150000.1.53.1 lock rpm

  go1.24-race
  Go runtime race detector

  1.24.12-150000.1.53.1 lock rpm