Alerts This Week
Warning Icon 1 1,109
Alerts This Week
Warning Icon 1 1,109

SUSE: 2025:0285-1 critical: go1.24 security patch available now

suse
Calendar Grey January 29, 2025
Dist Suse Esm H88
SUSE Linux releases critical security update for go1.24, fixing important vulnerabilities and ensuring system integrity.
* bsc#1236045 * bsc#1236046 * bsc#1236217 * bsc#1236360 * bsc#1236361

Summary

## This update for go1.24 fixes the following issues: This update ships go1.24rc2 (bsc#1236217). * CVE-2024-45341: Properly check for IPv6 hosts in URIs (bsc#1236045) * CVE-2024-45336: Persist header stripping across repeated redirects (bsc#1236046) * CVE-2025-22865: Avoid panic when parsing partial PKCS#1 private keys (bsc#1236361) * CVE-2024-45340: Restore netrc preferences for GOAUTH and fix domain lookup (bsc#1236360) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 15 SP3 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2025-285=1 * SUSE Linux Enterprise Server 15 SP4 LTSS

Topics%20covered

Topics Covered

security advisory buffer overflow critical network issue SUSE Linux Enterprise go1.24

References

* bsc#1236045

* bsc#1236046

* bsc#1236217

* bsc#1236360

* bsc#1236361

Cross-

* CVE-2024-45336

* CVE-2024-45340

* CVE-2024-45341

* CVE-2025-22865

CVSS scores:

* CVE-2024-45336 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

* CVE-2024-45340 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L

* CVE-2024-45340 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2024-45341 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

* CVE-2025-22865 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2025-22865 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected Products:

* Development Tools Module 15-SP6

* openSUSE Leap 15.6

* SUSE Enterprise Storage 7.1

* SUSE Linux Enterprise Desktop 15 SP6

Severity
critical
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2025:0285-1
Release Date: 2025-01-29T14:31:49Z
Rating: important

Topics%20covered

Topics Covered

security advisory buffer overflow critical network issue SUSE Linux Enterprise go1.24

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here