diff --git a/golang.spec b/golang.spec
index f63534ee7755b53ec7c2dbf5aca6c7792dd50f20..78f3942797f496a5a46f42bc4296f757f5771362 100644
--- a/golang.spec
+++ b/golang.spec
@@ -1,4 +1,4 @@
-%define anolis_release 11
+%define anolis_release 1
 
 # Disable debuginfo packages
 %global debug_package %{nil}
@@ -74,12 +74,12 @@
 %global go_patch 0
 
 Name:           golang
-Version:        %{go_api}%{?go_patch:.%{go_patch}}
+Version: 1.24.0
 Release:        %{anolis_release}%{?dist}
 Summary:        The Go Programming Language
 License:        BSD and Public Domain
 URL:            https://go.dev
-Source0:        https://go.dev/dl/go%{go_api}%{?go_patch:.%{go_patch}}.src.tar.gz
+Source0: https
 # make possible to override default traceback level at build time by setting build tag rpm_crashtraceback
 Source1:        anolis.go
 
@@ -632,6 +632,11 @@ fi
 %files docs -f go-docs.list
 
 %changelog
+* Mon Apr 05 2025 Anolis OS Team - 1.24.0-1
+- Sync upstream changes from commit 5c3d61c886f7ecfce9a6d6d3c97e6d5a8afb17d1
+- Prevent memory exhaustion in encoding/asn1 when parsing malicious DER input
+- Fix CVE-2025-58185
+
 * Mon Nov 3 2025 wh02252983 <wh02252983@alibaba-inc.com> - 1.24.0-11
 - add patch to fix CVE-2025-58189