8.6
High
CVE-2025-61732 A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary
Description
A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| cmd/cgo 1.25 | 1.25.0-0 → < 1.25.7 | 1.25.7 |
| cmd/cgo 1.24 | earliest → < 1.24.13 | 1.24.13 |
| Red Hat Enterprise Linux AppStream EUS (v. 10.0) | Versions not published | |
| Red Hat Enterprise Linux AppStream (v. 10) | Versions not published | |
| Red Hat Enterprise Linux AppStream (v. 8) | Versions not published | |
| Red Hat Enterprise Linux AppStream AUS (v. 8.2) | Versions not published | |
| Red Hat Enterprise Linux AppStream AUS (v.8.4) | Versions not published | |
| Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) | Versions not published | |
| Red Hat Enterprise Linux AppStream AUS (v.8.6) | Versions not published |
Show the 43 other branches Hide the 43 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux AppStream E4S (v.8.6) | Versions not published | |
| Red Hat Enterprise Linux AppStream TUS (v.8.6) | Versions not published | |
| Red Hat Enterprise Linux AppStream E4S (v.8.8) | Versions not published | |
| Red Hat Enterprise Linux AppStream TUS (v.8.8) | Versions not published | |
| Red Hat Enterprise Linux AppStream E4S (v.9.0) | Versions not published | |
| Red Hat Enterprise Linux AppStream E4S (v.9.2) | Versions not published | |
| Red Hat Enterprise Linux AppStream EUS (v.9.4) | Versions not published | |
| Red Hat Enterprise Linux AppStream EUS (v.9.6) | Versions not published | |
| Red Hat Enterprise Linux AppStream (v. 9) | Versions not published | |
| Red Hat Hardened Images 1.25 | earliest → < 1.25.9-1.hum1 | 1.25.9-1.hum1 |
| Red Hat OpenShift Container Platform 4.12 1777001645 | earliest → < 1777001645 | 1777001645 |
| Red Hat OpenShift Container Platform 4.13 1779889628 | earliest → < 1779889628 | 1779889628 |
| Red Hat OpenShift Container Platform 4.14 1777997544 | earliest → < 1777997544 | 1777997544 |
| Red Hat OpenShift Container Platform 4.15 1777478134 | earliest → < 1777478134 | 1777478134 |
| Red Hat OpenShift Container Platform 4.16 1776729097 | earliest → < 1776729097 | 1776729097 |
| Red Hat OpenShift Container Platform 4.17 1778710215 | earliest → < 1778710215 | 1778710215 |
| Red Hat OpenShift Container Platform 4.18 1776169493 | earliest → < 1776169493 | 1776169493 |
| Red Hat OpenShift Container Platform 4.19 1774287072 | earliest → < 1774287072 | 1774287072 |
| Red Hat OpenShift Container Platform 4.20 1772141838 | earliest → < 1772141838 | 1772141838 |
| Red Hat OpenShift Dev Spaces (RHOSDS) 3.26 1770913862 | earliest → < 1770913862 | 1770913862 |
| Red Hat OpenShift Service Mesh 2.6 1772083861 | earliest → < 1772083861 | 1772083861 |
| Red Hat OpenShift Service Mesh 3.0 1774294372 | earliest → < 1774294372 | 1774294372 |
| Red Hat OpenShift Service Mesh 3.1 1774293851 | earliest → < 1774293851 | 1774293851 |
| Red Hat OpenShift Service Mesh 3.2 1774294809 | earliest → < 1774294809 | 1774294809 |
| Red Hat Enterprise Linux 9 | Versions not published | |
| Red Hat OpenShift Virtualization 4 | Versions not published | |
| Red Hat OpenShift Service Mesh 3 1774294372 | earliest → < 1774294372 | 1774294372 |
| Red Hat Enterprise Linux 10 | Versions not published | |
| Red Hat Enterprise Linux 10.0 Extended Update Support | Versions not published | |
| Red Hat Enterprise Linux 8 8100020260212045823 | earliest → < 8100020260212045823.a3795dee | 8100020260212045823.a3795dee |
| Red Hat Enterprise Linux 8.2 Advanced Update Support 8020020260227115231.02 | earliest → < 8020020260227115231.02f7cb7a | 8020020260227115231.02f7cb7a |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 8040020260227112052.5081 | earliest → < 8040020260227112052.5081a262 | 8040020260227112052.5081a262 |
| Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On 8040020260227112052.5081 | earliest → < 8040020260227112052.5081a262 | 8040020260227112052.5081a262 |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 8060020260227122329.97 | earliest → < 8060020260227122329.97d7f71f | 8060020260227122329.97d7f71f |
| Red Hat Enterprise Linux 8.6 Telecommunications Update Service 8060020260227122329.97 | earliest → < 8060020260227122329.97d7f71f | 8060020260227122329.97d7f71f |
| Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions 8060020260227122329.97 | earliest → < 8060020260227122329.97d7f71f | 8060020260227122329.97d7f71f |
| Red Hat Enterprise Linux 8.8 Telecommunications Update Service 8080020260227110256.6 | earliest → < 8080020260227110256.6b4b45d8 | 8080020260227110256.6b4b45d8 |
| Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 8080020260227110256.6 | earliest → < 8080020260227110256.6b4b45d8 | 8080020260227110256.6b4b45d8 |
| Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | Versions not published | |
| Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | Versions not published | |
| Red Hat Enterprise Linux 9.4 Extended Update Support | Versions not published | |
| Red Hat Enterprise Linux 9.6 Extended Update Support | Versions not published | |
| Red Hat OpenShift Container Platform 4.2 1772141838 | earliest → < 1772141838 | 1772141838 |
References
- go.dev go.dev
- go.dev go.dev
- groups.google.com groups.google.com
- pkg.go.dev pkg.go.dev
Timeline
- Published
- Last modified