{"id":"CLSA-2025-1766138358","aliases":[],"status":"published","title":"golang: Fix of 5 CVEs","description":"- Update to Go 1.25.3","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2026-07-30T12:02:57Z","modified":"2026-10-26T09:30:59Z","fixes":[{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"go-toolset","fixed_in":["1.25.3-1.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"golang","fixed_in":["1.25.3-1.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"golang-bin","fixed_in":["1.25.3-1.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"golang-docs","fixed_in":["1.25.3-1.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"golang-misc","fixed_in":["1.25.3-1.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"golang-race","fixed_in":["1.25.3-1.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"golang-src","fixed_in":["1.25.3-1.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"golang-tests","fixed_in":["1.25.3-1.el9_6.tuxcare.els1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"go-toolset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.3-1.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.3-1.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"golang-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.3-1.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"golang-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.3-1.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"golang-misc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.3-1.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"golang-race","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.3-1.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"golang-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.3-1.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"golang-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.3-1.el9_6.tuxcare.els1"}]}]}],"references":[{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2025-1766138358.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-47912","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-58183","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-58185","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-58189","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61724","tags":["advisory"]}],"sources":{"osv":[{"id":"CLSA-2025-1766138358","title":"golang: Fix of 5 CVEs","description":"- Update to Go 1.25.3","status":"published","published":"2026-07-30T12:02:57Z","modified":"2026-10-26T09:30:59.871098195Z","updated_at":"2026-11-02T15:43:42.847264Z"}]}}