Hello gophers,
We plan to issue Go 1.23.5, Go 1.22.11, and Go 1.24 RC2 during US business hours on Thursday, January 16.
These releases include PRIVATE security fixes to the standard library, covering the following CVEs:
CVE-2024-45336
CVE-2024-45341
The Go 1.24 RC2 release includes the security fixes listed above and additional PRIVATE security fixes to the standard library and the toolchain, covering the following CVEs:
CVE-2024-45340
CVE-2025-22865
Following our security policy, this is the pre-announcement of those releases.
Thanks,
Michael and Michael for the Go team