critical Security update for go1.24-openssl

SUSE-SLE-Module-Development-Tools-15-SP7-2026-789

This update for go1.24-openssl fixes the following issues: Update to version 1.24.13 (jsc#SLE-18320, bsc#1236217). Security issues fixed: - CVE-2025-61732: cmd/cgo: discrepancy between Go and C/C++ comment parsing allows for C code smuggling (bsc#1257692). - CVE-2025-68119: cmd/go: unexpected code execution when invoking toolchain (bsc#1256820). - CVE-2025-68121: crypto/tls: Config.Clone copies automatically generated session ticket keys, session resumption does not account for the expiration of full certificate chain (bsc#1256818). Other updates and bugfixes: - go#77322 crypto/x509: single-label excluded DNS name constraints incorrectly match all wildcard SANs - go#77424 crypto/tls: CL 737700 broke session resumption on macOS

• Release Date
  Mar 3 2026
• References
  Bugzilla: 1236217, 1256818, 1256820, 1257692
  CVEs: CVE-2025-61732, CVE-2025-68119, CVE-2025-68121
• Type
  security
• Severity
  critical

cloud_download Downloads

Development Tools Module 15.7 aarch64

• Packages
  go1.24-openssl
  Go compiler with dynamic linkage to OpenSSL libcrypto for use in FIPS mode

  1.24.13-150600.13.18.1 lock rpm lock src

  go1.24-openssl-doc
  Go documentation

  1.24.13-150600.13.18.1 lock rpm

  go1.24-openssl-race
  Go runtime race detector

  1.24.13-150600.13.18.1 lock rpm

Development Tools Module 15.7 ppc64le

• Packages
  go1.24-openssl
  Go compiler with dynamic linkage to OpenSSL libcrypto for use in FIPS mode

  1.24.13-150600.13.18.1 lock rpm lock src

  go1.24-openssl-doc
  Go documentation

  1.24.13-150600.13.18.1 lock rpm

  go1.24-openssl-race
  Go runtime race detector

  1.24.13-150600.13.18.1 lock rpm

Development Tools Module 15.7 s390x

• Packages
  go1.24-openssl
  Go compiler with dynamic linkage to OpenSSL libcrypto for use in FIPS mode

  1.24.13-150600.13.18.1 lock rpm lock src

  go1.24-openssl-doc
  Go documentation

  1.24.13-150600.13.18.1 lock rpm

  go1.24-openssl-race
  Go runtime race detector

  1.24.13-150600.13.18.1 lock rpm

Development Tools Module 15.7 x86_64

• Packages
  go1.24-openssl
  Go compiler with dynamic linkage to OpenSSL libcrypto for use in FIPS mode

  1.24.13-150600.13.18.1 lock rpm lock src

  go1.24-openssl-doc
  Go documentation

  1.24.13-150600.13.18.1 lock rpm

  go1.24-openssl-race
  Go runtime race detector

  1.24.13-150600.13.18.1 lock rpm