Alerts This Week
Warning Icon 1 666
Alerts This Week
Warning Icon 1 666

Mageia 9: golang Important Security Fix for CVE-2025-47906, CVE-2025-47907

mageia
Calendar Grey September 1, 2025
Dist Mageia Esm H88
Mageia 9 has released significant updates for the golang package, which resolve serious vulnerabilities impacting various applications. Prompt measures are recommended.
MGASA-2025-0221 - Updated golang packages fix vulnerabilities

Summary

Description: LookPath may return unexpected paths, CVE-2025-47906. incorrect results returned from Rows.Scan, CVE-2025-47907. These packages fix the issues for the compiler only; applications using the functions still need to be rebuilt.

References

- https://bugs.mageia.org/show_bug.cgi?id=34584

- https://www.openwall.com/lists/oss-security/2025/08/06/1

- https://www.cve.org/CVERecord?id=CVE-2025-47906

- https://www.cve.org/CVERecord?id=CVE-2025-47907

Topics%20covered

Topics Covered

security advisory important compiler golang Mageia unexpected paths

Resolution

SRPMS

- 9/core/golang-1.24.6-1.mga9

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 01 Sep 2025
URL: https://advisories.mageia.org/MGASA-2025-0221.html
Type: security
CVE: CVE-2025-47906, CVE-2025-47907

Topics%20covered

Topics Covered

security advisory important compiler golang Mageia unexpected paths

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here