Back Linuxsecurity

openSUSE: Critical Security Update for go1.24, CVE-2025-61727, 61729

Linuxsecurity •LinuxSecurity Advisories • December 10, 2025

This update for go1.24 fixes the following issues: go1.24.11 (released 2025-12-02) includes two security fixes to the crypto/x509 package, as well as bug fixes to the runtime. (bsc#1236217) CVE-2025-61727 CVE-2025-61729: * go#76460 go#76445 bsc#1254431 security: fix CVE-2025-61729 crypto/x509: excessive resource consumption in printing error string for host certificate validation * go#76463 go#76442 bsc#1254430 security: fix CVE-2025-61727 crypto/x509: excluded subdomain constraint doesn't preclude wildcard SAN * go#76378 internal/cpu: incorrect CPU features bit parsing on loong64 cause illegal instruction core dumps on LA364 cores * Packaging: Migrate from update-alternatives to libalternatives (bsc#1245878) * This is an optional migration controlled via prjconf definition with_libalternatives * If with_libalternatives is not defined packaging continues to use update- alternatives

## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-4337=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2025-4337=1 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2025-4337=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-4337=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-4337=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-4337=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in Read the Full Advisory

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

zypper in -t patch openSUSE-SLE-15.6-2025-4337=1

* Development Tools Module 15-SP6

zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2025-4337=1

* Development Tools Module 15-SP7

zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2025-4337=1

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP3

zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-4337=1

* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4

zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-4337=1

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4

zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-4337=1

* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5

* openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * go1.24-1.24.11-150000.1.50.1 * go1.24-race-1.24.11-150000.1.50.1 * go1.24-doc-1.24.11-150000.1.50.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * go1.24-1.24.11-150000.1.50.1 * go1.24-race-1.24.11-150000.1.50.1 * go1.24-doc-1.24.11-150000.1.50.1 * Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * go1.24-1.24.11-150000.1.50.1 * go1.24-race-1.24.11-150000.1.50.1 * go1.24-doc-1.24.11-150000.1.50.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * go1.24-1.24.11-150000.1.50.1 * go1.24-race-1.24.11-150000.1.50.1 * go1.24-doc-1.24.11-150000.1.50.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * go1.24-1.24.11-150000.1.50.1 * go1.24-race-1.24.11-150000.1.50.1 * go1.24-doc-1.24.11-150000.1.50.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 Read the Full Advisory