Skip to main content
CVE-2025-47912VulnerabilityPublished 03/03/2026Updated 09/16/2026

Security update for go1.24-openssl

Affects SUSE Product Security Team SUSESource GCVE Database

0

Mentioned vulnerabilities

Not known to be exploited · patch available : patch SUSE Product Security Team SUSE as a priority.

Data as of 10/25/2026, 07:59:02 UTC

Severity
Critical

No CVSS score from NVD or the CNA

Exploitation

Not in CISA KEV, no exploitation reported

EPSS
0.4% chance of exploitation in 30 days – higher than 39% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch
Available

What to do

Affected software

ProductAffectedFixed in
SUSE Product Security Team SUSEAffected
  • =2.0
  • =3.0
  • <0.9.9-r1
Fixed in
  • 0.9.9-r1

AI-suggested

A security update is available that fixes all the listed vulnerabilities in go1.24-openssl version 1.24.13. Users and administrators should apply this update promptly to mitigate the risks. No additional vendor advisories indicate that no action is required or that these issues are already mitigated by other means.

Description

This security update for go1.24-openssl addresses multiple critical vulnerabilities affecting various components such as crypto/tls, net/mail, crypto/x509, encoding/asn1, net/http, archive/tar, net/url, archive/zip, and cmd/go. The issues include memory exhaustion, excessive CPU consumption, denial of service, panic conditions, information leakage, and potential arbitrary code execution. The update fixes these vulnerabilities in version 1.24.13 of go1.24-openssl.

Impact

The vulnerabilities fixed in this update can lead to critical impacts such as denial of service via memory exhaustion or excessive CPU consumption, information disclosure through attacker-controlled data leakage, panic conditions causing service disruption, and potential arbitrary code execution. These issues affect core components of the Go language's cryptographic, networking, and archive handling libraries, which could compromise the security and stability of applications relying on go1.24-openssl.

References

Community reviews

Loading reviews…