This site is being rebuilt and some pages are out of date. For current details, write to [email protected]. This notice goes away when the rebuild is done.

No analytics unless you allow it, no tracking. This site keeps in your browser the language you pick, the theme, its colour, which site you chose, the currency on the pricing page and that you closed this notice; signing in adds session cookies. The legal page has the details.

Sign in

Radar · Go · Archive · Week 3 · Jan 12 – 18, 2026

Security fixes in Go 1.24.12

Worth knowingecosystem

What changed
The release includes security fixes to the go command, the archive/zip, crypto/tls, and net/url packages, and bug fixes to the compiler, runtime, crypto/tls, and os packages.
Production impact
The source does not say.
Try it
Run go version to confirm you are on 1.24.12 and test a simple program that uses net/url to ensure no regressions.
Source
go.dev/doc/devel/release#go1.24.12

Understand it, then run it

The Go 1.24.12 release adds security fixes to several core packages: the go command, archive/zip, crypto/tls, and net/url. It also includes bug fixes for the compiler, runtime, crypto/tls, and os. These changes are part of routine maintenance to keep the language and its libraries safe and reliable. The release does not introduce new language features or APIs, so existing code continues to compile unchanged.

Written by gpt-oss-20b from the linked source · claims checked against the sources · archive, not individually reviewed