Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

SUSE: go1.25 Important Resource Consumption Risk 2025:4336-1

suse
Calendar Grey December 10, 2025
Dist Suse Esm H88
Important updates for go1.25 address multiple security issues enhancing overall system integrity.
* bsc#1244485 * bsc#1245878 * bsc#1254227 * bsc#1254430 * bsc#1254431

Summary

## This update for go1.25 fixes the following issues: go1.25.5 (released 2025-12-02) includes two security fixes to the crypto/x509 package, as well as bug fixes to the mime and os packages. (bsc#1244485) CVE-2025-61729 CVE-2025-61727: * go#76461 go#76445 bsc#1254431 security: fix CVE-2025-61729 crypto/x509: excessive resource consumption in printing error string for host certificate validation * go#76464 go#76442 bsc#1254430 security: fix CVE-2025-61727 crypto/x509: excluded subdomain constraint doesn't preclude wildcard SAN * go#76245 mime: FormatMediaType and ParseMediaType not compatible across 1.24 to 1.25 * go#76360 os: on windows RemoveAll removing directories containing read-only files errors with unlinkat ... Access is denied, ReOpenFile error handling followup

Topics%20covered

Topics Covered

security advisory security issue important SuSE Linux resource consumption subdomain constraint

References

* bsc#1244485

* bsc#1245878

* bsc#1254227

* bsc#1254430

* bsc#1254431

Cross-

* CVE-2025-61727

* CVE-2025-61729

CVSS scores:

* CVE-2025-61727 ( SUSE ): 8.2

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

* CVE-2025-61727 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

* CVE-2025-61727 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

* CVE-2025-61729 ( SUSE ): 8.7

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

* CVE-2025-61729 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

* CVE-2025-61729 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products:

* Development Tools Module 15-SP6

* Development Tools Module 15-SP7

* openSUSE Leap 15.6

* SUSE Enterprise Storage 7.1

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2025:4336-1
Release Date: 2025-12-09T23:50:46Z
Rating: important

Topics%20covered

Topics Covered

security advisory security issue important SuSE Linux resource consumption subdomain constraint

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here