File _patchinfo of Package patchinfo.37351
<patchinfo incident="37351">
<issue tracker="bnc" id="1236217">go1.24 release tracking</issue>
<issue tracker="bnc" id="1236801">VUL-0: CVE-2025-22866 go1.22,go1.23,go1.24: crypto/elliptic: timing sidechannel for P-256 on ppc64le</issue>
<issue tracker="bnc" id="1236839">VUL-0: CVE-2025-22867 go1.24: cmd/go: arbitrary code execution during build on darwin</issue>
<issue tracker="cve" id="2025-22866"/>
<issue tracker="cve" id="2025-22867"/>
<packager>jfkw</packager>
<rating>moderate</rating>
<category>security</category>
<summary>Security update for go1.24</summary>
<description>This update for go1.24 fixes the following issues:
- CVE-2025-22866: Fixed timing sidechannel for P-256 on ppc64le (bsc#1236801).
- CVE-2025-22867: Fixed arbitrary code execution during build on darwin (bsc#1236839).
Other fixes:
- go1.2r42 release tracking (bsc#1236217)
</description>
</patchinfo>