golang-1.25.5-2.el9_7

エラータID: AXSA:2026-074:01

Release date: 
Sunday, January 25, 2026 - 11:51
Subject: 
golang-1.25.5-2.el9_7
Affected Channels: 
MIRACLE LINUX 9 for x86_64
Severity: 
High
Description: 

The golang packages provide the Go programming language compiler.

Security Fix(es):

* crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2025-61729
Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.

Solution: 

Update packages.

CVEs: 
CVE-2025-61729
Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.
Additional Info: 

N/A

Download: 

SRPMS
  1. golang-1.25.5-2.el9_7.src.rpm
    MD5: 704244c4b5f76ab38eb41fa35d897430
    SHA-256: 827dd163602bbecedbcda7b4555400f552ba66f6b020dce739d58f6d5a64d81c
    Size: 32.75 MB

Asianux Server 9 for x86_64
  1. golang-1.25.5-2.el9_7.x86_64.rpm
    MD5: 8e8e6b7155d8bf56fa7de607af8691f5
    SHA-256: fd95677796dcd6278d85c6c2d4d735a1309a9531249514bfca672f12dbff922b
    Size: 1.25 MB
  2. golang-bin-1.25.5-2.el9_7.x86_64.rpm
    MD5: 5495d33d17b8b2881fc2b4d5d920edd2
    SHA-256: 5d5f2c1f0679a4481e05342d14aa343fca739d1563b22cd8d26f42138f1fad3d
    Size: 36.48 MB
  3. golang-docs-1.25.5-2.el9_7.noarch.rpm
    MD5: 3b02d453d105f3805de84d0ecf12cfca
    SHA-256: 1421022263c219eddba7b771608f53d22ef341281d83bae295ad47d7f42d0fd3
    Size: 108.72 kB
  4. golang-misc-1.25.5-2.el9_7.noarch.rpm
    MD5: ab0ee438f3c4612b4294e874898845c1
    SHA-256: f8bd5cabb4038fd6aa8c5cabc619b29b978c10e98f9de70236ea35e65f025b41
    Size: 41.74 kB
  5. golang-race-1.25.5-2.el9_7.x86_64.rpm
    MD5: a37f13278461a5ec4e1e987eb543a14d
    SHA-256: bb0a17838809320ef889ee3c103b89ff14b4e4e5e55787bf8b8fc0f9cc8a1639
    Size: 1.68 MB
  6. golang-src-1.25.5-2.el9_7.noarch.rpm
    MD5: 28c0277ee2a9edb12d01f136e84954e7
    SHA-256: 350bfb9c7d7f6751103cb5967d8d0a0676b3d3b5c008789408b26a32dbc689ca
    Size: 11.43 MB
  7. golang-tests-1.25.5-2.el9_7.noarch.rpm
    MD5: ae43fabf2e96cf8f347e611724ec17a8
    SHA-256: 1d10edd31f38221ac7ad4574b4e5568942f76938d6569f6de45bdec409435b26
    Size: 11.48 MB
  8. go-toolset-1.25.5-2.el9_7.x86_64.rpm
    MD5: a956ebf5a68b7149d04ea70d3d28e00c
    SHA-256: da1a6564a1f5ead19a67d8d358d7dba546c72a98453b46c784993976b839e42f
    Size: 9.72 kB