gpp_maybe Security update for go1.25

SUSE-SLE-Module-Development-Tools-15-SP7-2026-2817

This update for go1.25 fixes the following issues - Update to version go1.25.12 (bsc#1244485). - CVE-2026-25679: net/url: reject IPv6 literal not at start of host (bsc#1259264). - CVE-2026-27139: os: FileInfo can escape from a Root (bsc#1259268). - CVE-2026-27142: html/template: URLs in meta content attribute actions are not escaped (bsc#1259265). - CVE-2026-39822: os: Root escape via symlink plus trailing slash (bsc#1271014). - CVE-2026-42505: crypto/tls: omit PSK in ECH outer client hello (bsc#1271015).

• Release Date
  Jul 9 2026
• References
  Bugzilla: 1244485, 1245878, 1259264, 1259265, 1259268, 1264394, 1271014, 1271015
  CVEs: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-39822, CVE-2026-42505
• Type
  security
• Severity
  important

cloud_download Downloads

Development Tools Module 15.7 s390x

• Packages
  go1.25
  A compiled, garbage-collected, concurrent programming language

  1.25.12-150000.1.44.1 lock rpm lock src

  go1.25-doc
  Go documentation

  1.25.12-150000.1.44.1 lock rpm

  go1.25-race
  Go runtime race detector

  1.25.12-150000.1.44.1 lock rpm

Development Tools Module 15.7 ppc64le

• Packages
  go1.25
  A compiled, garbage-collected, concurrent programming language

  1.25.12-150000.1.44.1 lock rpm lock src

  go1.25-doc
  Go documentation

  1.25.12-150000.1.44.1 lock rpm

  go1.25-race
  Go runtime race detector

  1.25.12-150000.1.44.1 lock rpm

Development Tools Module 15.7 aarch64

• Packages
  go1.25
  A compiled, garbage-collected, concurrent programming language

  1.25.12-150000.1.44.1 lock rpm lock src

  go1.25-doc
  Go documentation

  1.25.12-150000.1.44.1 lock rpm

  go1.25-race
  Go runtime race detector

  1.25.12-150000.1.44.1 lock rpm

Development Tools Module 15.7 x86_64

• Packages
  go1.25
  A compiled, garbage-collected, concurrent programming language

  1.25.12-150000.1.44.1 lock rpm lock src

  go1.25-doc
  Go documentation

  1.25.12-150000.1.44.1 lock rpm

  go1.25-race
  Go runtime race detector

  1.25.12-150000.1.44.1 lock rpm