Back Linuxsecurity openSUSE: Addressing go1.25 Resource Issues and Crypto Vulnerabilities
This update for go1.25 fixes the following issues: go1.25.5 (released 2025-12-02) includes two security fixes to the crypto/x509 package, as well as bug fixes to the mime and os packages. (bsc#1244485) CVE-2025-61729 CVE-2025-61727: * go#76461 go#76445 bsc#1254431 security: fix CVE-2025-61729 crypto/x509: excessive resource consumption in printing error string for host certificate validation * go#76464 go#76442 bsc#1254430 security: fix CVE-2025-61727 crypto/x509: excluded subdomain constraint doesn't preclude wildcard SAN * go#76245 mime: FormatMediaType and ParseMediaType not compatible across 1.24 to 1.25 * go#76360 os: on windows RemoveAll removing directories containing read-only files errors with unlinkat ... Access is denied, ReOpenFile error handling followup * Packaging: Migrate from update-alternatives to libalternatives (bsc#1245878) * This is an optional migration controlled via prjconf definition with_libalternatives * If
## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2025-4336=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-4336=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-4336=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-4336=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-4336=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-4336=1 Read the Full Advisory
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* Development Tools Module 15-SP7
zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2025-4336=1
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP3
zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-4336=1
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4
zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-4336=1
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4
zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-4336=1
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5
zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-4336=1
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5
zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-4336=1
* Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * go1.25-1.25.5-150000.1.23.1 * go1.25-doc-1.25.5-150000.1.23.1 * go1.25-race-1.25.5-150000.1.23.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * go1.25-1.25.5-150000.1.23.1 * go1.25-doc-1.25.5-150000.1.23.1 * go1.25-race-1.25.5-150000.1.23.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * go1.25-1.25.5-150000.1.23.1 * go1.25-doc-1.25.5-150000.1.23.1 * go1.25-race-1.25.5-150000.1.23.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * go1.25-1.25.5-150000.1.23.1 * go1.25-doc-1.25.5-150000.1.23.1 * go1.25-race-1.25.5-150000.1.23.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * go1.25-1.25.5-150000.1.23.1 * go1.25-doc-1.25.5-150000.1.23.1 * go1.25-race-1.25.5-150000.1.23.1 * SUSE Linux Enterprise High Read the Full Advisory
* Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64)
* go1.25-1.25.5-150000.1.23.1
* go1.25-doc-1.25.5-150000.1.23.1
* go1.25-race-1.25.5-150000.1.23.1
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64
* go1.25-1.25.5-150000.1.23.1
* go1.25-doc-1.25.5-150000.1.23.1
* go1.25-race-1.25.5-150000.1.23.1
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64
* go1.25-1.25.5-150000.1.23.1
* go1.25-doc-1.25.5-150000.1.23.1
* go1.25-race-1.25.5-150000.1.23.1
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64
* go1.25-1.25.5-150000.1.23.1
* go1.25-doc-1.25.5-150000.1.23.1
* go1.25-race-1.25.5-150000.1.23.1
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64
* go1.25-1.25.5-150000.1.23.1
* go1.25-doc-1.25.5-150000.1.23.1
* go1.25-race-1.25.5-150000.1.23.1
* SUSE Linux Enterprise High
* bsc#1244485 * bsc#1245878 * bsc#1254227 * bsc#1254430 * bsc#1254431 ## References: * * * * * * *
*
*
*
*
*
*
*
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
