Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:02295-1

Опубликовано: 11 июл. 2025
Источник: suse-cvrf

Описание

Security update for go1.24

This update for go1.24 fixes the following issues:

  • Update to version go1.24.5
  • CVE-2025-4674: Fixed potential command execution in untrusted VCS repositories. (bsc#1246118)

Список пакетов

SUSE Enterprise Storage 7.1
go1.24-1.24.5-150000.1.29.1
go1.24-doc-1.24.5-150000.1.29.1
go1.24-race-1.24.5-150000.1.29.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS
go1.24-1.24.5-150000.1.29.1
go1.24-doc-1.24.5-150000.1.29.1
go1.24-race-1.24.5-150000.1.29.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
go1.24-1.24.5-150000.1.29.1
go1.24-doc-1.24.5-150000.1.29.1
go1.24-race-1.24.5-150000.1.29.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
go1.24-1.24.5-150000.1.29.1
go1.24-doc-1.24.5-150000.1.29.1
go1.24-race-1.24.5-150000.1.29.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
go1.24-1.24.5-150000.1.29.1
go1.24-doc-1.24.5-150000.1.29.1
go1.24-race-1.24.5-150000.1.29.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
go1.24-1.24.5-150000.1.29.1
go1.24-doc-1.24.5-150000.1.29.1
go1.24-race-1.24.5-150000.1.29.1
SUSE Linux Enterprise Module for Development Tools 15 SP6
go1.24-1.24.5-150000.1.29.1
go1.24-doc-1.24.5-150000.1.29.1
go1.24-race-1.24.5-150000.1.29.1
SUSE Linux Enterprise Module for Development Tools 15 SP7
go1.24-1.24.5-150000.1.29.1
go1.24-doc-1.24.5-150000.1.29.1
go1.24-race-1.24.5-150000.1.29.1
SUSE Linux Enterprise Server 15 SP3-LTSS
go1.24-1.24.5-150000.1.29.1
go1.24-doc-1.24.5-150000.1.29.1
go1.24-race-1.24.5-150000.1.29.1
SUSE Linux Enterprise Server 15 SP4-LTSS
go1.24-1.24.5-150000.1.29.1
go1.24-doc-1.24.5-150000.1.29.1
go1.24-race-1.24.5-150000.1.29.1
SUSE Linux Enterprise Server 15 SP5-LTSS
go1.24-1.24.5-150000.1.29.1
go1.24-doc-1.24.5-150000.1.29.1
go1.24-race-1.24.5-150000.1.29.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3
go1.24-1.24.5-150000.1.29.1
go1.24-doc-1.24.5-150000.1.29.1
go1.24-race-1.24.5-150000.1.29.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4
go1.24-1.24.5-150000.1.29.1
go1.24-doc-1.24.5-150000.1.29.1
go1.24-race-1.24.5-150000.1.29.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5
go1.24-1.24.5-150000.1.29.1
go1.24-doc-1.24.5-150000.1.29.1
go1.24-race-1.24.5-150000.1.29.1
openSUSE Leap 15.6
go1.24-1.24.5-150000.1.29.1
go1.24-doc-1.24.5-150000.1.29.1
go1.24-race-1.24.5-150000.1.29.1

Ссылки

Описание

The go command may execute unexpected commands when operating in untrusted VCS repositories. This occurs when possibly dangerous VCS configuration is present in repositories. This can happen when a repository was fetched via one VCS (e.g. Git), but contains metadata for another VCS (e.g. Mercurial). Modules which are retrieved using the go command line, i.e. via "go get", are not affected.

Затронутые продукты
SUSE Enterprise Storage 7.1:go1.24-1.24.5-150000.1.29.1
SUSE Enterprise Storage 7.1:go1.24-doc-1.24.5-150000.1.29.1
SUSE Enterprise Storage 7.1:go1.24-race-1.24.5-150000.1.29.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:go1.24-1.24.5-150000.1.29.1
Ссылки