SUSE-SU-2025:0431-1
Not scored
Security update for go1.24
This update for go1.24 fixes the following issues: - CVE-2025-22866: Fixed timing sidechannel for P-256 on ppc64le (bsc#1236801). - CVE-2025-22867: Fixed arbitrary code execution during build on darwin (bsc#1236839). Other fixes: - go1.2r42 release tracking (bsc#1236217)
Exploit probability
Not scored
Published
February 11, 2025
Required by
Not available
Last source change
February 4, 2026
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
SUSE-SU-2025:0431-1
View original source
This update for go1.24 fixes the following issues: - CVE-2025-22866: Fixed timing sidechannel for P-256 on ppc64le (bsc#1236801). - CVE-2025-22867: Fixed arbitrary code execution during build on darwin (bsc#1236839). Other fixes: - go1.2r42 release tracking (bsc#1236217)
05 / REFERENCES