Lifecycle Timeline
1DescriptionCVE.org
Alpine Linux: go fixed in 1.25.2-r0
AnalysisAI
The Go language runtime/toolchain package in Alpine Linux contains an unspecified vulnerability addressed in the Alpine package version 1.25.2-r0. The nature, root cause, and exploitability of this vulnerability are not disclosed in the available intelligence data. With an EPSS score of 0.02% (5th percentile), the empirical exploitation probability is negligible at this time, and no public exploit or active exploitation has been identified.
Technical ContextAI
This advisory covers the Go programming language package as distributed by the Alpine Linux project (APK ecosystem). Alpine packages the upstream Go toolchain and applies its own versioning scheme - the '-r0' suffix denotes the first Alpine-specific revision of upstream Go 1.25.2. The affected component is the Go runtime or standard library as packaged for Alpine Linux. No CWE classification is available, so the root cause class (e.g., memory safety, input validation, cryptographic weakness) cannot be determined from available data. No CPE strings were provided to narrow the affected product scope further.
Affected ProductsAI
The affected product is the Go language package (go) as distributed by Alpine Linux, in versions prior to 1.25.2-r0. The specific Alpine Linux release branch(es) affected are not identified in the available data - typically Alpine packages a given version across one or more stable branches (e.g., edge, v3.21). No CPE strings were provided. The upstream Go version corresponding to the 1.25.2-r0 Alpine package is Go 1.25.2. Systems not running Alpine Linux are not affected by this specific packaging advisory.
RemediationAI
Upgrade the Go package on affected Alpine Linux systems to version 1.25.2-r0 or later using the Alpine package manager: 'apk update && apk upgrade go'. This is the vendor-confirmed fix per the Alpine Linux security advisory. No workarounds or compensating controls are documented in the available data. If upgrading is not immediately possible and the vulnerability description becomes available, administrators should consult the Alpine Linux security tracker and upstream Go release notes for 1.25.2 to determine whether temporary mitigations (such as restricting access to Go-compiled services or disabling specific features) are applicable.
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today