{"schemaVersion":3,"id":"SUSE-SU-2025:03547-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for go1.25\n\nThis update for go1.25 fixes the following issues:\n\ngo1.25.2 (released 2025-10-07) includes security fixes to the\narchive/tar, crypto/tls, crypto/x509, encoding/asn1,\nencoding/pem, net/http, net/mail, net/textproto, and net/url\npackages, as well as bug fixes to the compiler, the runtime, and\nthe context, debug/pe, net/http, os, and sync/atomic packages.  (bsc#1244485)\n\n  CVE-2025-58189 CVE-2025-61725 CVE-2025-58188 CVE-2025-58185 CVE-2025-58186 CVE-2025-61723 CVE-2025-58183 CVE-2025-47912 CVE-2025-58187 CVE-2025-61724:\n\n  * bsc#1251255 CVE-2025-58189: crypto/tls: ALPN negotiation error contains attacker controlled information\n  * bsc#1251253 CVE-2025-61725: net/mail: excessive CPU consumption in ParseAddress\n  * bsc#1251260 CVE-2025-58188: crypto/x509: panic when validating certificates with DSA public keys\n  * bsc#1251258 CVE-2025-58185: encoding/asn1: pre-allocating memory when parsing DER payload can cause memory exhaustion\n  * bsc#1251259 CVE-2025-58186: net/http: lack of limit when parsing cookies can cause memory exhaustion\n  * bsc#1251256 CVE-2025-61723: encoding/pem: quadratic complexity when parsing some invalid inputs\n  * bsc#1251261 CVE-2025-58183: archive/tar: unbounded allocation when parsing GNU sparse map\n  * bsc#1251257 CVE-2025-47912: net/url: insufficient validation of bracketed IPv6 hostnames\n  * bsc#1251254 CVE-2025-58187: crypto/x509: quadratic complexity when checking name constraints\n  * bsc#1251262 CVE-2025-61724: net/textproto: excessive CPU consumption in Reader.ReadResponse\n\n  * go#75111 os, syscall: volume handles with FILE_FLAG_OVERLAPPED fail when calling ReadAt\n  * go#75116 os: Root.MkdirAll can return 'file exists' when called concurrently on the same path\n  * go#75139 os: Root.OpenRoot sets incorrect name, losing prefix of original root\n  * go#75221 debug/pe: pe.Open fails on object files produced by llvm-mingw 21\n  * go#75255 cmd/compile: export to DWARF types only referenced through interfaces\n  * go#75347 testing/synctest: test timeout with no runnable goroutines\n  * go#75357 net: new test TestIPv4WriteMsgUDPAddrPortTargetAddrIPVersion fails on plan9\n  * go#75524 crypto/internal/fips140/rsa: requires a panic if self-tests fail\n  * go#75537 context: Err can return non-nil before Done channel is closed\n  * go#75539 net/http: internal error: connCount underflow\n  * go#75595 cmd/compile: internal compiler error with GOEXPERIMENT=cgocheck2 on github.com/leodido/go-urn\n  * go#75610 sync/atomic: comment for Uintptr.Or incorrectly describes return value\n  * go#75669 runtime: debug.decoratemappings don't work as expected","dates":{"published":"2025-10-11T01:22:18.000Z","modified":"2026-03-23T04:50:35.834Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"opensuse","product":"go1.25&distro=openSUSE Leap 15.6","name":"go1.25","label":"go1.25&distro=openSUSE Leap 15.6","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/go1.25&distro=openSUSE Leap 15.6","purlType":"rpm","versions":[{"text":"< 1.25.2-150000.1.14.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.2-150000.1.14.1","eol":null,"hubHref":null},{"vendor":"suse","product":"go1.25&distro=SUSE Enterprise Storage 7.1","name":"go1.25","label":"go1.25&distro=SUSE Enterprise Storage 7.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/go1.25&distro=SUSE Enterprise Storage 7.1","purlType":"rpm","versions":[{"text":"< 1.25.2-150000.1.14.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.2-150000.1.14.1","eol":null,"hubHref":null},{"vendor":"suse","product":"go1.25&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS","name":"go1.25","label":"go1.25&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/go1.25&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS","purlType":"rpm","versions":[{"text":"< 1.25.2-150000.1.14.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.2-150000.1.14.1","eol":null,"hubHref":null},{"vendor":"suse","product":"go1.25&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","name":"go1.25","label":"go1.25&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/go1.25&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","purlType":"rpm","versions":[{"text":"< 1.25.2-150000.1.14.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.2-150000.1.14.1","eol":null,"hubHref":null},{"vendor":"suse","product":"go1.25&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","name":"go1.25","label":"go1.25&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/go1.25&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 1.25.2-150000.1.14.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.2-150000.1.14.1","eol":null,"hubHref":null},{"vendor":"suse","product":"go1.25&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS","name":"go1.25","label":"go1.25&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/go1.25&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS","purlType":"rpm","versions":[{"text":"< 1.25.2-150000.1.14.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.2-150000.1.14.1","eol":null,"hubHref":null},{"vendor":"suse","product":"go1.25&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS","name":"go1.25","label":"go1.25&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/go1.25&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS","purlType":"rpm","versions":[{"text":"< 1.25.2-150000.1.14.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.2-150000.1.14.1","eol":null,"hubHref":null},{"vendor":"suse","product":"go1.25&distro=SUSE Linux Enterprise Module for Development Tools 15 SP6","name":"go1.25","label":"go1.25&distro=SUSE Linux Enterprise Module for Development Tools 15 SP6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/go1.25&distro=SUSE Linux Enterprise Module for Development Tools 15 SP6","purlType":"rpm","versions":[{"text":"< 1.25.2-150000.1.14.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.2-150000.1.14.1","eol":null,"hubHref":null},{"vendor":"suse","product":"go1.25&distro=SUSE Linux Enterprise Module for Development Tools 15 SP7","name":"go1.25","label":"go1.25&distro=SUSE Linux Enterprise Module for Development Tools 15 SP7","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/go1.25&distro=SUSE Linux Enterprise Module for Development Tools 15 SP7","purlType":"rpm","versions":[{"text":"< 1.25.2-150000.1.14.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.2-150000.1.14.1","eol":null,"hubHref":null},{"vendor":"suse","product":"go1.25&distro=SUSE Linux Enterprise Server 15 SP3-LTSS","name":"go1.25","label":"go1.25&distro=SUSE Linux Enterprise Server 15 SP3-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/go1.25&distro=SUSE Linux Enterprise Server 15 SP3-LTSS","purlType":"rpm","versions":[{"text":"< 1.25.2-150000.1.14.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.2-150000.1.14.1","eol":null,"hubHref":null},{"vendor":"suse","product":"go1.25&distro=SUSE Linux Enterprise Server 15 SP4-LTSS","name":"go1.25","label":"go1.25&distro=SUSE Linux Enterprise Server 15 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/go1.25&distro=SUSE Linux Enterprise Server 15 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 1.25.2-150000.1.14.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.2-150000.1.14.1","eol":null,"hubHref":null},{"vendor":"suse","product":"go1.25&distro=SUSE Linux Enterprise Server 15 SP5-LTSS","name":"go1.25","label":"go1.25&distro=SUSE Linux Enterprise Server 15 SP5-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/go1.25&distro=SUSE Linux Enterprise Server 15 SP5-LTSS","purlType":"rpm","versions":[{"text":"< 1.25.2-150000.1.14.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.2-150000.1.14.1","eol":null,"hubHref":null},{"vendor":"suse","product":"go1.25&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3","name":"go1.25","label":"go1.25&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/go1.25&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3","purlType":"rpm","versions":[{"text":"< 1.25.2-150000.1.14.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.2-150000.1.14.1","eol":null,"hubHref":null},{"vendor":"suse","product":"go1.25&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4","name":"go1.25","label":"go1.25&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/go1.25&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4","purlType":"rpm","versions":[{"text":"< 1.25.2-150000.1.14.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.2-150000.1.14.1","eol":null,"hubHref":null},{"vendor":"suse","product":"go1.25&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP5","name":"go1.25","label":"go1.25&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/go1.25&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP5","purlType":"rpm","versions":[{"text":"< 1.25.2-150000.1.14.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.25.2-150000.1.14.1","eol":null,"hubHref":null}],"affectedCount":15,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202503547-1/","label":"www.suse.com/support/update/announcement/2025/suse-su-202503547-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1244485","label":"bugzilla.suse.com/1244485","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1251253","label":"bugzilla.suse.com/1251253","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1251254","label":"bugzilla.suse.com/1251254","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1251255","label":"bugzilla.suse.com/1251255","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1251256","label":"bugzilla.suse.com/1251256","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1251257","label":"bugzilla.suse.com/1251257","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1251258","label":"bugzilla.suse.com/1251258","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1251259","label":"bugzilla.suse.com/1251259","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1251260","label":"bugzilla.suse.com/1251260","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1251261","label":"bugzilla.suse.com/1251261","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1251262","label":"bugzilla.suse.com/1251262","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47912","label":"www.suse.com/security/cve/CVE-2025-47912","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58183","label":"www.suse.com/security/cve/CVE-2025-58183","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58185","label":"www.suse.com/security/cve/CVE-2025-58185","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58186","label":"www.suse.com/security/cve/CVE-2025-58186","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58187","label":"www.suse.com/security/cve/CVE-2025-58187","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58188","label":"www.suse.com/security/cve/CVE-2025-58188","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58189","label":"www.suse.com/security/cve/CVE-2025-58189","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61723","label":"www.suse.com/security/cve/CVE-2025-61723","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61724","label":"www.suse.com/security/cve/CVE-2025-61724","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61725","label":"www.suse.com/security/cve/CVE-2025-61725","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2025-47912","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-61723","CVE-2025-61724","CVE-2025-61725"],"downstream":[],"duplicates":[],"related":["CVE-2025-47912","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-61723","CVE-2025-61724","CVE-2025-61725"]},"timeline":[{"kind":"published","date":"2025-10-11T01:22:18.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-03-23T04:50:35.834Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T10:31:13.701Z","stale":false,"partial":false}}