gpp_maybe
Security update for go1.25-openssl
SUSE-SLES-16.0-339
This update for go1.25-openssl fixes the following issues: - Update to version 1.25.7 (jsc#SLE-18320) - CVE-2025-61730: crypto/tls: handshake messages may be processed at the incorrect encryption level (bsc#1256821) - CVE-2025-68119: cmd/go: unexpected code execution when invoking toolchain (bsc#1256820) - CVE-2025-61731: cmd/go: bypass of flag sanitization can lead to arbitrary code execution (bsc#1256819) - CVE-2025-61726: net/http: memory exhaustion in Request.ParseForm (bsc#1256817) - CVE-2025-61728: archive/zip: denial of service when parsing arbitrary ZIP archives (bsc#1256816) - CVE-2025-68121: crypto/tls: Config.Clone copies automatically generated session ticket keys, session resumption does not account for the expiration of full certificate chain (bsc#1256818) - CVE-2025-61729: crypto/x509: excessive resource consumption in printing error string for host certificate validation (bsc#1254431) - CVE-2025-61727: crypto/x509: excluded subdomain constraint doesn't preclude wildcard SA (bsc#1254430) - CVE-2025-58189: crypto/tls: ALPN negotiation error contains attacker controlled information (bsc#1251255) - CVE-2025-61725: net/mail: excessive CPU consumption in ParseAddress (bsc#1251253) - CVE-2025-58188: crypto/x509: panic when validating certificates with DSA public keys (bsc#1251260) - CVE-2025-58185: encoding/asn1: pre-allocating memory when parsing DER payload can cause memory exhaustion (bsc#1251258) - CVE-2025-58186: net/http: lack of limit when parsing cookies can cause memory exhaustion (bsc#1251259) - CVE-2025-61723: encoding/pem: quadratic complexity when parsing some invalid inputs (bsc#1251256) - CVE-2025-58183: archive/tar: unbounded allocation when parsing GNU sparse map (bsc#1251261) - CVE-2025-47912: net/url: insufficient validation of bracketed IPv6 hostnames (bsc#1251257) - CVE-2025-58187: crypto/x509: quadratic complexity when checking name constraints (bsc#1251254) - CVE-2025-61724: net/textproto: excessive CPU consumption in Reader.ReadResponse (bsc#1251262)
-
Release DateMar 3 2026
-
ReferencesBugzilla: 1251256, 1251253, 1256821, 1251262, 1251261, 1251260, 1251254, 1256817, 1251255, 1256819, 1251257, 1256820, 1256818, 1244485, 1257486, 1251259, 1256816, 1254227, 1254430, 1245878, 1254431, 1251258, 1249985
CVEs: CVE-2025-58189, CVE-2025-61728, CVE-2025-58183, CVE-2025-58186, CVE-2025-68119, CVE-2025-61729, CVE-2025-58187, CVE-2025-58185, CVE-2025-61724, CVE-2025-61726, CVE-2025-47912, CVE-2025-61725, CVE-2025-58188, CVE-2025-61727, CVE-2025-68121, CVE-2025-61731, CVE-2025-61730, CVE-2025-61723 -
Typesecurity
-
Severityimportant
cloud_download Downloads
SUSE Linux Enterprise Server for SAP applications 16.0 ppc64le
-
Packagesgo1.25-openssl
Go compiler with dynamic linkage to OpenSSL libcrypto for use in FIPS modego1.25-openssl-doc1.25.7-160000.1.1 lock rpm
Go documentationgo1.25-openssl-race1.25.7-160000.1.1 lock rpm
Go runtime race detector1.25.7-160000.1.1 lock rpm
SUSE Linux Enterprise Server for SAP applications 16.0 x86_64
-
Packagesgo1.25-openssl
Go compiler with dynamic linkage to OpenSSL libcrypto for use in FIPS modego1.25-openssl-doc1.25.7-160000.1.1 lock rpm
Go documentationgo1.25-openssl-race1.25.7-160000.1.1 lock rpm
Go runtime race detector1.25.7-160000.1.1 lock rpm
SUSE Linux Enterprise Server 16.0 x86_64
-
Packagesgo1.25-openssl
Go compiler with dynamic linkage to OpenSSL libcrypto for use in FIPS modego1.25-openssl-doc1.25.7-160000.1.1 lock rpm
Go documentationgo1.25-openssl-race1.25.7-160000.1.1 lock rpm
Go runtime race detector1.25.7-160000.1.1 lock rpm
SUSE Linux Enterprise Server 16.0 s390x
-
Packagesgo1.25-openssl
Go compiler with dynamic linkage to OpenSSL libcrypto for use in FIPS modego1.25-openssl-doc1.25.7-160000.1.1 lock rpm
Go documentationgo1.25-openssl-race1.25.7-160000.1.1 lock rpm
Go runtime race detector1.25.7-160000.1.1 lock rpm
SUSE Linux Enterprise Server 16.0 ppc64le
-
Packagesgo1.25-openssl
Go compiler with dynamic linkage to OpenSSL libcrypto for use in FIPS modego1.25-openssl-doc1.25.7-160000.1.1 lock rpm
Go documentationgo1.25-openssl-race1.25.7-160000.1.1 lock rpm
Go runtime race detector1.25.7-160000.1.1 lock rpm
SUSE Linux Enterprise Server 16.0 aarch64
-
Packagesgo1.25-openssl
Go compiler with dynamic linkage to OpenSSL libcrypto for use in FIPS modego1.25-openssl-doc1.25.7-160000.1.1 lock rpm
Go documentationgo1.25-openssl-race1.25.7-160000.1.1 lock rpm
Go runtime race detector1.25.7-160000.1.1 lock rpm