CVE-2025-61732

Publication date 5 February 2026

Last updated 6 February 2026


Ubuntu priority

Description

A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary.

Status

Package Ubuntu Release Status
golang-1.17 25.10 questing Not in release
24.04 LTS noble Not in release
22.04 LTS jammy
Needs evaluation
golang-1.20 25.10 questing Not in release
24.04 LTS noble Not in release
22.04 LTS jammy
Needs evaluation
20.04 LTS focal
Needs evaluation
golang-1.21 25.10 questing Not in release
24.04 LTS noble
Needs evaluation
22.04 LTS jammy
Needs evaluation
20.04 LTS focal
Needs evaluation
golang-1.22 25.10 questing Not in release
24.04 LTS noble
Needs evaluation
22.04 LTS jammy
Needs evaluation
20.04 LTS focal
Needs evaluation
golang-1.23 25.10 questing
Needs evaluation
24.04 LTS noble
Needs evaluation
22.04 LTS jammy
Needs evaluation
golang-1.24 25.10 questing
Needs evaluation
24.04 LTS noble Not in release
22.04 LTS jammy Not in release
golang-1.25 25.10 questing
Needs evaluation
24.04 LTS noble Not in release
22.04 LTS jammy Not in release