Alerts This Week
Warning Icon 1 1,146
Alerts This Week
Warning Icon 1 1,146

SUSE Linux 15 SP4 Critical Go1.25-OpenSSL Security Update 2026-0790-1

suse
Calendar Grey March 3, 2026
Dist Suse Esm H88
Go1.25-openssl critical update for SUSE fixes two significant issues. Enhance security by applying this patch promptly.
An update that solves two vulnerabilities and contains one feature can now be installed.

Summary

## This update for go1.25-openssl fixes the following issues: Update to version 1.25.7. Security issues fixed: * CVE-2025-61732: cmd/go: discrepancy between Go and C/C++ comment parsing allows for C code smuggling (bsc#1257692). * CVE-2025-68121: crypto/tls: Config.Clone copies automatically generated session ticket keys, session resumption does not account for the expiration of full certificate chain (bsc#1256818). Other updates and bugfixes: * version update to 1.25.7: * go#75844 cmd/compile: OOM killed on linux/arm64 * go#77323 crypto/x509: single-label excluded DNS name constraints incorrectly match all wildcard SANs * go#77425 crypto/tls: CL 737700 broke session resumption on macOS ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like

Topics%20covered

Topics Covered

security advisory critical SuSE DoS description go1.25-openssl

References

* bsc#1256818

* bsc#1257692

* jsc#SLE-18320

Cross-

* CVE-2025-61732

* CVE-2025-68121

CVSS scores:

* CVE-2025-61732 ( SUSE ): 9.4

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

* CVE-2025-61732 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

* CVE-2025-61732 ( NVD ): 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

* CVE-2025-68121 ( SUSE ): 7.6

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

* CVE-2025-68121 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

* CVE-2025-68121 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

* CVE-2025-68121 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected Products:

* SUSE Linux Enterprise High Performance Computing 15 SP4

Severity
critical
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:0790-1
Release Date: 2026-03-03T15:52:23Z
Rating: critical

Topics%20covered

Topics Covered

security advisory critical SuSE DoS description go1.25-openssl

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here