[security] Go 1.24.4 and Go 1.23.10 pre-announcement

386 views
Skip to first unread message

anno...@golang.org

unread,
May 30, 2025, 5:19:51 PM (13 days ago) May 30
to golan...@googlegroups.com

Hello gophers,

We plan to issue Go 1.24.4 and Go 1.23.10 during US business hours on Thursday, June 5.

These minor releases include PRIVATE security fixes to the standard library, covering the following CVEs:

  • CVE-2025-4673
  • CVE-2025-0913
  • CVE-2025-22874

Following our security policy, this is the pre-announcement of those releases.

Thanks,
Michael and David for the Go team

Michael Knyszek

unread,
May 30, 2025, 5:25:16 PM (13 days ago) May 30
to golang-announce
Correction: only CVE-2025-4673 is a PRIVATE security fix. The others are PUBLIC.
Reply all
Reply to author
Forward
0 new messages