openSUSE go1.25-openssl Important Prot Issue 2026-0298

This update for go1.25-openssl fixes the following issues: Update to version 1.25.6 (released 2026-01-15) (jsc#SLE-18320, bsc#1244485): Security fixes: * CVE-2025-4674 cmd/go: disable support for multiple vcs in one module (bsc#1246118). * CVE-2025-47906 os/exec: LookPath bug: incorrect expansion of "", "." and ".." in some PATH configurations (bsc#1247719). * CVE-2025-47907 database/sql: incorrect results returned from Rows.Scan (bsc#1247720). * CVE-2025-47910 net/http: CrossOriginProtection insecure bypass patterns not limited to exact matches (bsc#1249141). * CVE-2025-47912 net/url: insufficient validation of bracketed IPv6 hostnames (bsc#1251257). * CVE-2025-58183 archive/tar: unbounded allocation when parsing GNU sparse map (bsc#1251261). * CVE-2025-58185 encoding/asn1: pre-allocating memory when parsing DER payload can cause memory exhaustion (bsc#1251258). * CVE-2025-58186 net/http: lack of limit when parsing cookies can cause memory

## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-298=1 openSUSE-SLE-15.6-2026-298=1 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-298=1 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-298=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-298=1

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

zypper in -t patch SUSE-2026-298=1 openSUSE-SLE-15.6-2026-298=1

* Development Tools Module 15-SP7

zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-298=1

* SUSE Linux Enterprise Server 15 SP6 LTSS

zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-298=1

* SUSE Linux Enterprise Server for SAP Applications 15 SP6

zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-298=1

* openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * go1.25-openssl-debuginfo-1.25.6-150600.13.9.1 * go1.25-openssl-1.25.6-150600.13.9.1 * go1.25-openssl-doc-1.25.6-150600.13.9.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * go1.25-openssl-race-1.25.6-150600.13.9.1 * Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * go1.25-openssl-debuginfo-1.25.6-150600.13.9.1 * go1.25-openssl-1.25.6-150600.13.9.1 * go1.25-openssl-doc-1.25.6-150600.13.9.1 * go1.25-openssl-race-1.25.6-150600.13.9.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * go1.25-openssl-debuginfo-1.25.6-150600.13.9.1 * go1.25-openssl-1.25.6-150600.13.9.1 * go1.25-openssl-doc-1.25.6-150600.13.9.1 * go1.25-openssl-race-1.25.6-150600.13.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * go1.25-openssl-debuginfo-1.25.6-150600.13.9.1 * go1.25-openssl-1.25.6-150600.13.9.1 * Read the Full Advisory

* openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586)

* go1.25-openssl-debuginfo-1.25.6-150600.13.9.1

* go1.25-openssl-1.25.6-150600.13.9.1

* go1.25-openssl-doc-1.25.6-150600.13.9.1

* openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64)

* go1.25-openssl-race-1.25.6-150600.13.9.1

* Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64)

* go1.25-openssl-debuginfo-1.25.6-150600.13.9.1

* go1.25-openssl-1.25.6-150600.13.9.1

* go1.25-openssl-doc-1.25.6-150600.13.9.1

* go1.25-openssl-race-1.25.6-150600.13.9.1

* SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64)

* go1.25-openssl-debuginfo-1.25.6-150600.13.9.1

* go1.25-openssl-1.25.6-150600.13.9.1

* go1.25-openssl-doc-1.25.6-150600.13.9.1

* go1.25-openssl-race-1.25.6-150600.13.9.1

* SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64)

* go1.25-openssl-debuginfo-1.25.6-150600.13.9.1

* go1.25-openssl-1.25.6-150600.13.9.1

* bsc#1244485 * bsc#1245878 * bsc#1246118 * bsc#1247719 * bsc#1247720 * bsc#1247816 * bsc#1248082 * bsc#1249141 * bsc#1249985 * bsc#1251253 * bsc#1251254 * bsc#1251255 * bsc#1251256 * bsc#1251257 * bsc#1251258 * bsc#1251259 * bsc#1251260 * bsc#1251261 * bsc#1251262 * bsc#1254227 * bsc#1254430 * bsc#1254431 * bsc#1256816 * bsc#1256817 * bsc#1256818 * bsc#1256819 * bsc#1256820 * bsc#1256821 * jsc#SLE-18320 ## References: * * * * * * * * * * Read the Full Advisory

*

*

*

*

*

*

*

*

*