We plan to issue Go 1.25.6, Go 1.24.12 and Go 1.26 RC2 during US business hours on Thursday, Jan 15.
These minor releases include PRIVATE security fixes to the standard library and the toolchain, covering the following CVEs:
CVE-2025-61728
CVE-2025-61726
CVE-2025-68121
CVE-2025-61731
CVE-2025-68119
Following our security policy, this is the pre-announcement of those releases.
Thanks,
Michael and Junyang for the Go team