Golang Go: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 3

• High 7.5
  CVE-2025-22874

  Usage of ExtKeyUsageAny disables policy validation in crypto/x509

  Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation. This only affected certificate chains which contain policy graphs, which are rather uncommon.

  Go standard library crypto/x509 golang go Debian Ubuntu Azure Linux Alpine Wolfi Go
  Jun 11, 2025
• Medium 6.8
  CVE-2025-4673

  Sensitive headers not cleared on cross-origin redirect in net/http

  Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.

  Go standard library net/http katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go
  Jun 11, 2025
• Medium 5.5
  CVE-2025-0913

  Inconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall

  os.OpenFile(path, os.O_CREATE|O_EXCL) behaved differently on Unix and Windows systems when the target path was a dangling symlink. On Unix systems, OpenFile with O_CREATE and O_EXCL flags never follows symlinks. On Windows, when the target path was a symlink …

  Go standard library os syscall katib-suggestion-hyperopt Ubuntu Azure Linux Alpine Wolfi Go
  Jun 11, 2025

Revision history

1. 2026-10-27 #35

   Neue Updates von Red Hat aufgenommen

2. 2026-10-21 #34

   Neue Updates von Red Hat aufgenommen

3. 2026-08-04 #33

   Neue Updates von openSUSE aufgenommen

4. 2026-03-11 #32

   Neue Updates von Splunk-SVD aufgenommen

5. 2026-02-18 #31

   Neue Updates von Splunk-SVD aufgenommen

6. 2026-01-05 #30

   Neue Updates von Amazon aufgenommen

7. 2025-12-10 #29

   Neue Updates von IBM aufgenommen

8. 2025-11-17 #28

   Neue Updates von XEROX aufgenommen

9. 2025-11-11 #27

   Neue Updates von Red Hat aufgenommen

10. 2025-11-05 #26

    Neue Updates von IBM aufgenommen

11. 2025-11-03 #25

    Neue Updates von Red Hat aufgenommen

12. 2025-10-14 #24

    Neue Updates von Amazon aufgenommen

13. 2025-10-09 #23

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

14. 2025-09-24 #22

    Neue Updates von IBM aufgenommen

15. 2025-09-22 #21

    Neue Updates von Red Hat aufgenommen

16. 2025-09-15 #20

    Neue Updates von Red Hat aufgenommen

17. 2025-09-10 #19

    Neue Updates von SUSE aufgenommen

18. 2025-09-07 #18

    Neue Updates von Red Hat aufgenommen

19. 2025-09-01 #17

    Neue Updates von IBM aufgenommen

20. 2025-08-14 #16

    Neue Updates von Red Hat aufgenommen

21. 2025-08-06 #15

    Neue Updates von IBM aufgenommen

22. 2025-07-30 #14

    Neue Updates von Amazon aufgenommen

23. 2025-07-27 #13

    Neue Updates von openSUSE aufgenommen

24. 2025-07-15 #12

    Neue Updates von Oracle Linux aufgenommen

25. 2025-07-10 #11

    Neue Updates von Amazon und Oracle Linux aufgenommen

References

• Ubuntu Security Notice USN-7574-1 vom 2025-06-19
  https://ubuntu.com/security/notices/USN-7574-1
• Amazon Linux Security Advisory ALAS-2025-2900 vom 2025-06-24
  https://alas.aws.amazon.com/AL2/ALAS-2025-2900.html
• Go 1.24.4 and Go 1.23.10 pre-announcement vom 2025-06-01
  https://groups.google.com/g/Golang-Nuts/c/T9FCA0Vz5DU
• Golang GitHub vom 2025-06-01
  https://github.com/golang/go/commit/adcad7bea9f6933a219c7b05d8173cf8a4586092
• Golang GitHub vom 2025-06-01
  https://github.com/golang/go/commit/9bba799955e68972041c4f340ee4ea2d267e5c0e
• Golang GitHub vom 2025-06-01
  https://github.com/golang/go/issues/73816
• Golang Announce
  https://groups.google.com/g/golang-announce/c/ufZ8WpEsA3A/m/XDxq7uidAgAJ
• SUSE Security Update SUSE-SU-2025:01848-1 vom 2025-06-09
  https://lists.suse.com/pipermail/sle-security-updates/2025-June/021439.html
• Arch Linux Security Advisory ASA-202506-4 vom 2025-06-07
  https://security.archlinux.org/ASA-202506-4
• SUSE Security Update SUSE-SU-2025:01846-1 vom 2025-06-09
  https://lists.suse.com/pipermail/sle-security-updates/2025-June/021440.html
• SUSE Security Update SUSE-SU-2025:02120-1 vom 2025-06-26
  https://lists.suse.com/pipermail/sle-security-updates/2025-June/021667.html
• Amazon Linux Security Advisory ALAS2-2025-2900 vom 2025-06-30
  https://alas.aws.amazon.com/AL2/ALAS2-2025-2900.html
• Red Hat Security Advisory RHSA-2025:10676 vom 2025-07-09
  https://access.redhat.com/errata/RHSA-2025:10676
• Red Hat Security Advisory RHSA-2025:10672 vom 2025-07-09
  https://access.redhat.com/errata/RHSA-2025:10672
• Red Hat Security Advisory RHSA-2025:10677 vom 2025-07-09
  https://access.redhat.com/errata/RHSA-2025:10677
• Oracle Linux Security Advisory ELSA-2025-10676 vom 2025-07-09
  https://linux.oracle.com/errata/ELSA-2025-10676.html
• Red Hat Security Advisory RHSA-2025:10735 vom 2025-07-09
  https://access.redhat.com/errata/RHSA-2025:10735
• Amazon Linux Security Advisory ALAS2-2025-2922 vom 2025-07-10
  https://alas.aws.amazon.com/AL2/ALAS2-2025-2922.html
• Amazon Linux Security Advisory ALAS2DOCKER-2025-073 vom 2025-07-10
  https://alas.aws.amazon.com/AL2/ALAS2DOCKER-2025-073.html
• Amazon Linux Security Advisory ALAS2DOCKER-2025-075 vom 2025-07-10
  https://alas.aws.amazon.com/AL2/ALAS2DOCKER-2025-075.html
• Amazon Linux Security Advisory ALAS2DOCKER-2025-072 vom 2025-07-10
  https://alas.aws.amazon.com/AL2/ALAS2DOCKER-2025-072.html
• Amazon Linux Security Advisory ALAS2DOCKER-2025-074 vom 2025-07-10
  https://alas.aws.amazon.com/AL2/ALAS2DOCKER-2025-074.html
• Amazon Linux Security Advisory ALAS2-2025-2921 vom 2025-07-10
  https://alas.aws.amazon.com/AL2/ALAS2-2025-2921.html
• Amazon Linux Security Advisory ALAS2NITRO-ENCLAVES-2025-067 vom 2025-07-10
  https://alas.aws.amazon.com/AL2/ALAS2NITRO-ENCLAVES-2025-067.html
• Amazon Linux Security Advisory ALAS2NITRO-ENCLAVES-2025-069 vom 2025-07-10
  https://alas.aws.amazon.com/AL2/ALAS2NITRO-ENCLAVES-2025-069.html
• Amazon Linux Security Advisory ALAS2DOCKER-2025-070 vom 2025-07-10
  https://alas.aws.amazon.com/AL2/ALAS2DOCKER-2025-070.html
• Amazon Linux Security Advisory ALAS2DOCKER-2025-071 vom 2025-07-10
  https://alas.aws.amazon.com/AL2/ALAS2DOCKER-2025-071.html
• Amazon Linux Security Advisory ALAS2NITRO-ENCLAVES-2025-066 vom 2025-07-10
  https://alas.aws.amazon.com/AL2/ALAS2NITRO-ENCLAVES-2025-066.html
• Oracle Linux Security Advisory ELSA-2025-10677 vom 2025-07-10
  https://linux.oracle.com/errata/ELSA-2025-10677.html
• Amazon Linux Security Advisory ALAS2NITRO-ENCLAVES-2025-068 vom 2025-07-10
  https://alas.aws.amazon.com/AL2/ALAS2NITRO-ENCLAVES-2025-068.html
• Oracle Linux Security Advisory ELSA-2025-10672 vom 2025-07-16
  https://linux.oracle.com/errata/ELSA-2025-10672.html
• openSUSE Security Update OPENSUSE-SU-2025:15379-1 vom 2025-07-25
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OXBEI4HV3ZI5QUREZ6X2EFASXDURBHCX/
• Amazon Linux Security Advisory ALAS2ECS-2025-072 vom 2025-07-30
  https://alas.aws.amazon.com/AL2/ALAS2ECS-2025-072.html
• Amazon Linux Security Advisory ALAS2ECS-2025-074 vom 2025-07-30
  https://alas.aws.amazon.com/AL2/ALAS2ECS-2025-074.html
• Amazon Linux Security Advisory ALAS2ECS-2025-073 vom 2025-07-30
  https://alas.aws.amazon.com/AL2/ALAS2ECS-2025-073.html
• Amazon Linux Security Advisory ALAS2ECS-2025-071 vom 2025-07-30
  https://alas.aws.amazon.com/AL2/ALAS2ECS-2025-071.html
• IBM Security Bulletin 7241536 vom 2025-08-06
  https://www.ibm.com/support/pages/node/7241536
• Red Hat Security Advisory RHSA-2025:13931 vom 2025-08-15
  https://access.redhat.com/errata/RHSA-2025:13931
• Red Hat Security Advisory RHSA-2025:13932 vom 2025-08-15
  https://access.redhat.com/errata/RHSA-2025:13932
• IBM Security Bulletin 7243686 vom 2025-09-01
  https://www.ibm.com/support/pages/node/7243686
• Red Hat Security Advisory RHSA-2025:15406 vom 2025-09-08
  https://access.redhat.com/errata/RHSA-2025:15406
• SUSE Security Update SUSE-SU-2025:03158-1 vom 2025-09-11
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HAVLJWP2USKN4NDD3DHWC5JLHYAIS3ZK/
• SUSE Security Update SUSE-SU-2025:03159-1 vom 2025-09-11
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XFEARURIFMW7G6QDQKSBP7SQWCSCVYJS/
• Red Hat Security Advisory RHSA-2025:15887 vom 2025-09-16
  https://access.redhat.com/errata/RHSA-2025:15887
• Red Hat Security Advisory RHSA-2025:16432 vom 2025-09-23
  https://access.redhat.com/errata/RHSA-2025:16432
• IBM Security Bulletin 7246105 vom 2025-09-25
  https://www.ibm.com/support/pages/node/7246105
• Rocky Linux Security Advisory RLSA-2025:15887 vom 2025-10-10
  https://errata.build.resf.org/RLSA-2025:15887
• Amazon Linux Security Advisory ALAS2ECS-2025-075 vom 2025-10-14
  https://alas.aws.amazon.com/AL2/ALAS2ECS-2025-075.html
• Amazon Linux Security Advisory ALAS2DOCKER-2025-077 vom 2025-10-14
  https://alas.aws.amazon.com/AL2/ALAS2DOCKER-2025-077.html
• Amazon Linux Security Advisory ALAS2NITRO-ENCLAVES-2025-071 vom 2025-10-14
  https://alas.aws.amazon.com/AL2/ALAS2NITRO-ENCLAVES-2025-071.html
• Red Hat Security Advisory RHSA-2025:19003 vom 2025-11-03
  https://access.redhat.com/errata/RHSA-2025:19003
• IBM Security Bulletin 7250258 vom 2025-11-06
  https://www.ibm.com/support/pages/node/7250258
• Red Hat Security Advisory RHSA-2025:19890 vom 2025-11-11
  https://access.redhat.com/errata/RHSA-2025:19890
• XEROX Security Advisory XRX25-018 vom 2025-11-18
  https://security.business.xerox.com/wp-content/uploads/2025/11/Xerox-Security-Bulletin-XRX25-018-Xerox-FreeFlow-Print-Server-v7.pdf
• IBM Security Bulletin 7254313 vom 2025-12-10
  https://www.ibm.com/support/pages/node/7254313
• Amazon Linux Security Advisory ALAS2-2025-3121 vom 2026-01-05
  https://alas.aws.amazon.com/AL2/ALAS2-2025-3121.html
• Splunk Security Advisory SVD-2026-0211 vom 2026-02-18
  https://advisory.splunk.com//advisories/SVD-2026-0211
• Splunk Security Advisory SVD-2026-0306 vom 2026-03-11
  https://advisory.splunk.com//advisories/SVD-2026-0306
• openSUSE Security Update OPENSUSE-SU-2026:11436-1 vom 2026-08-04
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YCJFXS3AKOLGK7LDLQD4QUEAFOBQLFE7/
• Red Hat Security Advisory RHSA-2026:87245 vom 2026-10-22
  https://access.redhat.com/errata/RHSA-2026:87245
• Red Hat Security Advisory RHSA-2026:87246 vom 2026-10-21
  https://access.redhat.com/errata/RHSA-2026:87246
• Red Hat Security Advisory RHSA-2026:90994 vom 2026-10-27
  https://access.redhat.com/errata/RHSA-2026:90994