SUSE-SU-2025:0431-1

Advisory lineage Upstream: 2 Downstream: 0
Published: 11 Feb 2025, 14:13
Last modified:04 Feb 2026, 02:41

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

11 Feb 2025, 14:13
Published
Vulnerability first disclosed
04 Feb 2026, 02:41
Last Modified
Vulnerability information updated

Description

Security update for go1.24 This update for go1.24 fixes the following issues: - CVE-2025-22866: Fixed timing sidechannel for P-256 on ppc64le (bsc#1236801). - CVE-2025-22867: Fixed arbitrary code execution during build on darwin (bsc#1236839). Other fixes: - go1.2r42 release tracking (bsc#1236217)

Affected Systems

  • opensuse•go1.24&distro=openSUSE Leap 15.6

    < 1.24rc3-150000.1.6.1

  • suse•go1.24&distro=SUSE Linux Enterprise Module for Development Tools 15 SP6

    < 1.24rc3-150000.1.6.1

References (6)