SUSE-SU-2025:0285-1: Security update for go1.24

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise Server 15 SP5-LTSS go1.24

SUSE:Enterprise Storage 7.1 go1.24

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS go1.24

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS go1.24

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS go1.24

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS go1.24

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS go1.24

SUSE:Linux Enterprise Module for Development Tools 15 SP6 go1.24

SUSE:Linux Enterprise Server 15 SP3-LTSS go1.24

SUSE:Linux Enterprise Server 15 SP4-LTSS go1.24

SUSE:Linux Enterprise Server for SAP Applications 15 SP3 go1.24

SUSE:Linux Enterprise Server for SAP Applications 15 SP4 go1.24

SUSE:Linux Enterprise Server for SAP Applications 15 SP5 go1.24

openSUSE:Leap 15.6 go1.24

03 / CONNECTIONS

Connected vulnerabilities

related CVE-2024-45336

related CVE-2024-45340

related CVE-2024-45341

related CVE-2025-22865

upstream CVE-2024-45336

upstream CVE-2024-45340

upstream CVE-2024-45341

upstream CVE-2025-22865

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2025:0285-1

This update for go1.24 fixes the following issues: This update ships go1.24rc2 (bsc#1236217). - CVE-2024-45341: Properly check for IPv6 hosts in URIs (bsc#1236045) - CVE-2024-45336: Persist header stripping across repeated redirects (bsc#1236046) - CVE-2025-22865: Avoid panic when parsing partial PKCS#1 private keys (bsc#1236361) - CVE-2024-45340: Restore netrc preferences for GOAUTH and fix domain lookup (bsc#1236360)

View original source

05 / REFERENCES

Affected packages

Connected vulnerabilities

Source records

Further evidence