SUSE-SU-2026:22958-1
- Source
- https://www.suse.com/support/update/announcement/2026/suse-su-202622958-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:22958-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/SUSE-SU-2026:22958-1
- Upstream
- Related
- Published
- 2026-07-27T10:18:15Z
- Modified
- 2026-07-29T18:24:18Z
- Summary
- Security update for go1.26-openssl, go1.25-openssl, go1.24-openssl, go1.23-openssl, go1.22-openssl, go1.26, go1.25, go1.24, go1.23, go1.22, go1.21
- Details
-
This update for go1.26-openssl, go1.25-openssl, go1.24-openssl, go1.23-openssl, go1.22-openssl, go1.26, go1.25, go1.24, go1.23, go1.22, go1.21 fixes the following issues:
Changes in go compilers:
-
Switch from update-alternatives to new method.
-
Packaging improvements:
- Revert %ghost /usr/bin/go /usr/bin/gofmt which prevents install of a working go command. Refs boo#1245878 bsc#1264395
- Based on feedback from Factory maintainers restore the original lifecycle for these files: Each go1.x toolchain shares ownership of a go and gofmt symlink managed by the alternatives system (update-alternatives and libalternatives). When the last go1.x package is uninstalled the symlinks will be removed.
- Context: %ghost was introduced to prevent file conflicts among go1.x toolchain packages reported by installcheck dev tool. %ghost prevents the files from being installed, which results in no installed go command. The shared ownership of the go and gofmt symlinks is intentional.
- Define go_bootstrap_version with digits without go1.x prefix. Correct path spelling to align with current toolchain layout GOROOT_BOOTSTRAP=%{_libdir}/go/%{go_bootstrap_version}, Noting interstitial /go/ in path. Fixes bootstrap ERROR: Cannot find /usr/lib64/go1.x/bin/go. Set $GOROOT_BOOTSTRAP to a working Go tree >= Go 1.x.y. Bootstrap error first observed when using %ghost /usr/bin/go. Fixed by Eugenio Paolantonio. Refs boo#1245878 bsc#1264395
- Mark %ghost /usr/bin/go /usr/bin/gofmt to avoid file conflicts among go1.x toolchain packages. These files are managed by the alternatives system. Refs boo#1245878 bsc#1264395
-
- References
-
- https://www.suse.com/support/update/announcement/2026/suse-su-202622958-1/
- https://bugzilla.suse.com/1245878
- https://bugzilla.suse.com/1264390
- https://bugzilla.suse.com/1264391
- https://bugzilla.suse.com/1264392
- https://bugzilla.suse.com/1264393
- https://bugzilla.suse.com/1264394
- https://bugzilla.suse.com/1264395
- https://www.suse.com/security/cve/CVE-2025-22871
Affected packages
SUSE:Linux Enterprise Server 16.0
go1.24
Package
- Name
- go1.24
- Purl
- pkg:rpm/suse/go1.24&distro=SUSE%20Linux%20Enterprise%20Server%2016.0
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed1.24.13-160000.3.1
Ecosystem specific
{
"binaries": [
{
"go1.24": "1.24.13-160000.3.1",
"go1.24-doc": "1.24.13-160000.3.1",
"go1.24-openssl": "1.24.13-160000.3.1",
"go1.24-openssl-doc": "1.24.13-160000.3.1",
"go1.24-openssl-race": "1.24.13-160000.3.1",
"go1.24-race": "1.24.13-160000.3.1",
"go1.25": "1.25.12-160000.2.1",
"go1.25-doc": "1.25.12-160000.2.1",
"go1.25-openssl": "1.25.12-160000.2.1",
"go1.25-openssl-doc": "1.25.12-160000.2.1",
"go1.25-openssl-race": "1.25.12-160000.2.1",
"go1.25-race": "1.25.12-160000.2.1",
"go1.26": "1.26.5-160000.2.1",
"go1.26-doc": "1.26.5-160000.2.1",
"go1.26-openssl": "1.26.5-160000.2.1",
"go1.26-openssl-doc": "1.26.5-160000.2.1",
"go1.26-openssl-race": "1.26.5-160000.2.1",
"go1.26-race": "1.26.5-160000.2.1"
}
]
}go1.24-openssl
Package
- Name
- go1.24-openssl
- Purl
- pkg:rpm/suse/go1.24-openssl&distro=SUSE%20Linux%20Enterprise%20Server%2016.0
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed1.24.13-160000.3.1
Ecosystem specific
{
"binaries": [
{
"go1.24": "1.24.13-160000.3.1",
"go1.24-doc": "1.24.13-160000.3.1",
"go1.24-openssl": "1.24.13-160000.3.1",
"go1.24-openssl-doc": "1.24.13-160000.3.1",
"go1.24-openssl-race": "1.24.13-160000.3.1",
"go1.24-race": "1.24.13-160000.3.1",
"go1.25": "1.25.12-160000.2.1",
"go1.25-doc": "1.25.12-160000.2.1",
"go1.25-openssl": "1.25.12-160000.2.1",
"go1.25-openssl-doc": "1.25.12-160000.2.1",
"go1.25-openssl-race": "1.25.12-160000.2.1",
"go1.25-race": "1.25.12-160000.2.1",
"go1.26": "1.26.5-160000.2.1",
"go1.26-doc": "1.26.5-160000.2.1",
"go1.26-openssl": "1.26.5-160000.2.1",
"go1.26-openssl-doc": "1.26.5-160000.2.1",
"go1.26-openssl-race": "1.26.5-160000.2.1",
"go1.26-race": "1.26.5-160000.2.1"
}
]
}go1.25
Package
- Name
- go1.25
- Purl
- pkg:rpm/suse/go1.25&distro=SUSE%20Linux%20Enterprise%20Server%2016.0
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed1.25.12-160000.2.1
Ecosystem specific
{
"binaries": [
{
"go1.24": "1.24.13-160000.3.1",
"go1.24-doc": "1.24.13-160000.3.1",
"go1.24-openssl": "1.24.13-160000.3.1",
"go1.24-openssl-doc": "1.24.13-160000.3.1",
"go1.24-openssl-race": "1.24.13-160000.3.1",
"go1.24-race": "1.24.13-160000.3.1",
"go1.25": "1.25.12-160000.2.1",
"go1.25-doc": "1.25.12-160000.2.1",
"go1.25-openssl": "1.25.12-160000.2.1",
"go1.25-openssl-doc": "1.25.12-160000.2.1",
"go1.25-openssl-race": "1.25.12-160000.2.1",
"go1.25-race": "1.25.12-160000.2.1",
"go1.26": "1.26.5-160000.2.1",
"go1.26-doc": "1.26.5-160000.2.1",
"go1.26-openssl": "1.26.5-160000.2.1",
"go1.26-openssl-doc": "1.26.5-160000.2.1",
"go1.26-openssl-race": "1.26.5-160000.2.1",
"go1.26-race": "1.26.5-160000.2.1"
}
]
}go1.25-openssl
Package
- Name
- go1.25-openssl
- Purl
- pkg:rpm/suse/go1.25-openssl&distro=SUSE%20Linux%20Enterprise%20Server%2016.0
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed1.25.12-160000.2.1
Ecosystem specific
{
"binaries": [
{
"go1.24": "1.24.13-160000.3.1",
"go1.24-doc": "1.24.13-160000.3.1",
"go1.24-openssl": "1.24.13-160000.3.1",
"go1.24-openssl-doc": "1.24.13-160000.3.1",
"go1.24-openssl-race": "1.24.13-160000.3.1",
"go1.24-race": "1.24.13-160000.3.1",
"go1.25": "1.25.12-160000.2.1",
"go1.25-doc": "1.25.12-160000.2.1",
"go1.25-openssl": "1.25.12-160000.2.1",
"go1.25-openssl-doc": "1.25.12-160000.2.1",
"go1.25-openssl-race": "1.25.12-160000.2.1",
"go1.25-race": "1.25.12-160000.2.1",
"go1.26": "1.26.5-160000.2.1",
"go1.26-doc": "1.26.5-160000.2.1",
"go1.26-openssl": "1.26.5-160000.2.1",
"go1.26-openssl-doc": "1.26.5-160000.2.1",
"go1.26-openssl-race": "1.26.5-160000.2.1",
"go1.26-race": "1.26.5-160000.2.1"
}
]
}go1.26
Package
- Name
- go1.26
- Purl
- pkg:rpm/suse/go1.26&distro=SUSE%20Linux%20Enterprise%20Server%2016.0
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed1.26.5-160000.2.1
Ecosystem specific
{
"binaries": [
{
"go1.24": "1.24.13-160000.3.1",
"go1.24-doc": "1.24.13-160000.3.1",
"go1.24-openssl": "1.24.13-160000.3.1",
"go1.24-openssl-doc": "1.24.13-160000.3.1",
"go1.24-openssl-race": "1.24.13-160000.3.1",
"go1.24-race": "1.24.13-160000.3.1",
"go1.25": "1.25.12-160000.2.1",
"go1.25-doc": "1.25.12-160000.2.1",
"go1.25-openssl": "1.25.12-160000.2.1",
"go1.25-openssl-doc": "1.25.12-160000.2.1",
"go1.25-openssl-race": "1.25.12-160000.2.1",
"go1.25-race": "1.25.12-160000.2.1",
"go1.26": "1.26.5-160000.2.1",
"go1.26-doc": "1.26.5-160000.2.1",
"go1.26-openssl": "1.26.5-160000.2.1",
"go1.26-openssl-doc": "1.26.5-160000.2.1",
"go1.26-openssl-race": "1.26.5-160000.2.1",
"go1.26-race": "1.26.5-160000.2.1"
}
]
}go1.26-openssl
Package
- Name
- go1.26-openssl
- Purl
- pkg:rpm/suse/go1.26-openssl&distro=SUSE%20Linux%20Enterprise%20Server%2016.0
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed1.26.5-160000.2.1
Ecosystem specific
{
"binaries": [
{
"go1.24": "1.24.13-160000.3.1",
"go1.24-doc": "1.24.13-160000.3.1",
"go1.24-openssl": "1.24.13-160000.3.1",
"go1.24-openssl-doc": "1.24.13-160000.3.1",
"go1.24-openssl-race": "1.24.13-160000.3.1",
"go1.24-race": "1.24.13-160000.3.1",
"go1.25": "1.25.12-160000.2.1",
"go1.25-doc": "1.25.12-160000.2.1",
"go1.25-openssl": "1.25.12-160000.2.1",
"go1.25-openssl-doc": "1.25.12-160000.2.1",
"go1.25-openssl-race": "1.25.12-160000.2.1",
"go1.25-race": "1.25.12-160000.2.1",
"go1.26": "1.26.5-160000.2.1",
"go1.26-doc": "1.26.5-160000.2.1",
"go1.26-openssl": "1.26.5-160000.2.1",
"go1.26-openssl-doc": "1.26.5-160000.2.1",
"go1.26-openssl-race": "1.26.5-160000.2.1",
"go1.26-race": "1.26.5-160000.2.1"
}
]
}SUSE:Linux Enterprise Server for SAP applications 16.0
go1.24
Package
- Name
- go1.24
- Purl
- pkg:rpm/suse/go1.24&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed1.24.13-160000.3.1
Ecosystem specific
{
"binaries": [
{
"go1.24": "1.24.13-160000.3.1",
"go1.24-doc": "1.24.13-160000.3.1",
"go1.24-openssl": "1.24.13-160000.3.1",
"go1.24-openssl-doc": "1.24.13-160000.3.1",
"go1.24-openssl-race": "1.24.13-160000.3.1",
"go1.24-race": "1.24.13-160000.3.1",
"go1.25": "1.25.12-160000.2.1",
"go1.25-doc": "1.25.12-160000.2.1",
"go1.25-openssl": "1.25.12-160000.2.1",
"go1.25-openssl-doc": "1.25.12-160000.2.1",
"go1.25-openssl-race": "1.25.12-160000.2.1",
"go1.25-race": "1.25.12-160000.2.1",
"go1.26": "1.26.5-160000.2.1",
"go1.26-doc": "1.26.5-160000.2.1",
"go1.26-openssl": "1.26.5-160000.2.1",
"go1.26-openssl-doc": "1.26.5-160000.2.1",
"go1.26-openssl-race": "1.26.5-160000.2.1",
"go1.26-race": "1.26.5-160000.2.1"
}
]
}go1.24-openssl
Package
- Name
- go1.24-openssl
- Purl
- pkg:rpm/suse/go1.24-openssl&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed1.24.13-160000.3.1
Ecosystem specific
{
"binaries": [
{
"go1.24": "1.24.13-160000.3.1",
"go1.24-doc": "1.24.13-160000.3.1",
"go1.24-openssl": "1.24.13-160000.3.1",
"go1.24-openssl-doc": "1.24.13-160000.3.1",
"go1.24-openssl-race": "1.24.13-160000.3.1",
"go1.24-race": "1.24.13-160000.3.1",
"go1.25": "1.25.12-160000.2.1",
"go1.25-doc": "1.25.12-160000.2.1",
"go1.25-openssl": "1.25.12-160000.2.1",
"go1.25-openssl-doc": "1.25.12-160000.2.1",
"go1.25-openssl-race": "1.25.12-160000.2.1",
"go1.25-race": "1.25.12-160000.2.1",
"go1.26": "1.26.5-160000.2.1",
"go1.26-doc": "1.26.5-160000.2.1",
"go1.26-openssl": "1.26.5-160000.2.1",
"go1.26-openssl-doc": "1.26.5-160000.2.1",
"go1.26-openssl-race": "1.26.5-160000.2.1",
"go1.26-race": "1.26.5-160000.2.1"
}
]
}go1.25
Package
- Name
- go1.25
- Purl
- pkg:rpm/suse/go1.25&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed1.25.12-160000.2.1
Ecosystem specific
{
"binaries": [
{
"go1.24": "1.24.13-160000.3.1",
"go1.24-doc": "1.24.13-160000.3.1",
"go1.24-openssl": "1.24.13-160000.3.1",
"go1.24-openssl-doc": "1.24.13-160000.3.1",
"go1.24-openssl-race": "1.24.13-160000.3.1",
"go1.24-race": "1.24.13-160000.3.1",
"go1.25": "1.25.12-160000.2.1",
"go1.25-doc": "1.25.12-160000.2.1",
"go1.25-openssl": "1.25.12-160000.2.1",
"go1.25-openssl-doc": "1.25.12-160000.2.1",
"go1.25-openssl-race": "1.25.12-160000.2.1",
"go1.25-race": "1.25.12-160000.2.1",
"go1.26": "1.26.5-160000.2.1",
"go1.26-doc": "1.26.5-160000.2.1",
"go1.26-openssl": "1.26.5-160000.2.1",
"go1.26-openssl-doc": "1.26.5-160000.2.1",
"go1.26-openssl-race": "1.26.5-160000.2.1",
"go1.26-race": "1.26.5-160000.2.1"
}
]
}go1.25-openssl
Package
- Name
- go1.25-openssl
- Purl
- pkg:rpm/suse/go1.25-openssl&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed1.25.12-160000.2.1
Ecosystem specific
{
"binaries": [
{
"go1.24": "1.24.13-160000.3.1",
"go1.24-doc": "1.24.13-160000.3.1",
"go1.24-openssl": "1.24.13-160000.3.1",
"go1.24-openssl-doc": "1.24.13-160000.3.1",
"go1.24-openssl-race": "1.24.13-160000.3.1",
"go1.24-race": "1.24.13-160000.3.1",
"go1.25": "1.25.12-160000.2.1",
"go1.25-doc": "1.25.12-160000.2.1",
"go1.25-openssl": "1.25.12-160000.2.1",
"go1.25-openssl-doc": "1.25.12-160000.2.1",
"go1.25-openssl-race": "1.25.12-160000.2.1",
"go1.25-race": "1.25.12-160000.2.1",
"go1.26": "1.26.5-160000.2.1",
"go1.26-doc": "1.26.5-160000.2.1",
"go1.26-openssl": "1.26.5-160000.2.1",
"go1.26-openssl-doc": "1.26.5-160000.2.1",
"go1.26-openssl-race": "1.26.5-160000.2.1",
"go1.26-race": "1.26.5-160000.2.1"
}
]
}go1.26
Package
- Name
- go1.26
- Purl
- pkg:rpm/suse/go1.26&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed1.26.5-160000.2.1
Ecosystem specific
{
"binaries": [
{
"go1.24": "1.24.13-160000.3.1",
"go1.24-doc": "1.24.13-160000.3.1",
"go1.24-openssl": "1.24.13-160000.3.1",
"go1.24-openssl-doc": "1.24.13-160000.3.1",
"go1.24-openssl-race": "1.24.13-160000.3.1",
"go1.24-race": "1.24.13-160000.3.1",
"go1.25": "1.25.12-160000.2.1",
"go1.25-doc": "1.25.12-160000.2.1",
"go1.25-openssl": "1.25.12-160000.2.1",
"go1.25-openssl-doc": "1.25.12-160000.2.1",
"go1.25-openssl-race": "1.25.12-160000.2.1",
"go1.25-race": "1.25.12-160000.2.1",
"go1.26": "1.26.5-160000.2.1",
"go1.26-doc": "1.26.5-160000.2.1",
"go1.26-openssl": "1.26.5-160000.2.1",
"go1.26-openssl-doc": "1.26.5-160000.2.1",
"go1.26-openssl-race": "1.26.5-160000.2.1",
"go1.26-race": "1.26.5-160000.2.1"
}
]
}go1.26-openssl
Package
- Name
- go1.26-openssl
- Purl
- pkg:rpm/suse/go1.26-openssl&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed1.26.5-160000.2.1
Ecosystem specific
{
"binaries": [
{
"go1.24": "1.24.13-160000.3.1",
"go1.24-doc": "1.24.13-160000.3.1",
"go1.24-openssl": "1.24.13-160000.3.1",
"go1.24-openssl-doc": "1.24.13-160000.3.1",
"go1.24-openssl-race": "1.24.13-160000.3.1",
"go1.24-race": "1.24.13-160000.3.1",
"go1.25": "1.25.12-160000.2.1",
"go1.25-doc": "1.25.12-160000.2.1",
"go1.25-openssl": "1.25.12-160000.2.1",
"go1.25-openssl-doc": "1.25.12-160000.2.1",
"go1.25-openssl-race": "1.25.12-160000.2.1",
"go1.25-race": "1.25.12-160000.2.1",
"go1.26": "1.26.5-160000.2.1",
"go1.26-doc": "1.26.5-160000.2.1",
"go1.26-openssl": "1.26.5-160000.2.1",
"go1.26-openssl-doc": "1.26.5-160000.2.1",
"go1.26-openssl-race": "1.26.5-160000.2.1",
"go1.26-race": "1.26.5-160000.2.1"
}
]
}