diff --git a/golang.spec b/golang.spec
index f63534ee7755b53ec7c2dbf5aca6c7792dd50f20..9c9c06f687406b6748fed54c0fec4376dce6388e 100644
--- a/golang.spec
+++ b/golang.spec
@@ -1,4 +1,4 @@
-%define anolis_release 11
+%define anolis_release 12
 
 # Disable debuginfo packages
 %global debug_package %{nil}
@@ -632,6 +632,10 @@ fi
 %files docs -f go-docs.list
 
 %changelog
+* Mon Jan 01 2024 Anolis OS Team - 1.24.0-12
+- Sync upstream changes from commit 5c3d61c886f7ecfce9a6d6d3c97e6d5a8afb17d1
+- Prevent memory exhaustion in encoding/asn1 when parsing malicious DER input (CVE-2025-58185)
+
 * Mon Nov 3 2025 wh02252983 <wh02252983@alibaba-inc.com> - 1.24.0-11
 - add patch to fix CVE-2025-58189