Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is enough to allow recovery of the private key when P-256 is used in any well known protocols.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade osbuild-composer-coreUpgrade osbuild-composerUpgrade osbuild-composer-worker | Oct 11, 2026 | Sep 14, 2026 |
| Alpine Linux | — | Upgrade go | Aug 8, 2025 | Feb 6, 2025 |
| Debian | — | Upgrade golang-1.24 | May 15, 2025 | Feb 6, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Apr 1, 2025 | Feb 6, 2025 |
| Oracle_linux | — | Upgrade golangUpgrade golang-srcUpgrade osbuild-composerUpgrade golang-miscUpgrade golang-testsUpgrade golang-docsUpgrade golang-binUpgrade osbuild-composer-coreUpgrade delveUpgrade go-toolsetUpgrade osbuild-composer-worker | Jul 10, 2025 | Feb 6, 2025 |
| Redhat_linux | — | Upgrade go-toolsetUpgrade osbuild-composer-worker-debuginfoNo solution existsUpgrade golang-docsUpgrade golang-raceUpgrade golangUpgrade osbuild-composer-debugsourceUpgrade osbuild-composer-debuginfoUpgrade osbuild-composer-workerUpgrade golang-testsUpgrade rhc-debuginfoUpgrade osbuild-composer-tests-debuginfoUpgrade golang-miscUpgrade osbuild-composer-core-debuginfoUpgrade golang-binUpgrade delveUpgrade osbuild-composerUpgrade osbuild-composer-coreUpgrade rhcUpgrade rhc-develUpgrade rhc-debugsourceUpgrade golang-srcUpgrade delve-debugsourceUpgrade delve-debuginfo | May 14, 2025 | Feb 6, 2025 |
| Rocky_linux | — | Upgrade osbuild-composerUpgrade golangUpgrade osbuild-composer-coreUpgrade go-toolsetUpgrade delve-debuginfoUpgrade osbuild-composer-core-debuginfoUpgrade golang-binUpgrade osbuild-composer-worker-debuginfoUpgrade delveUpgrade osbuild-composer-debuginfoUpgrade osbuild-composer-debugsourceUpgrade osbuild-composer-workerUpgrade delve-debugsource | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade go1.24-openssl-raceUpgrade go1.22-opensslUpgrade go1.22-openssl-docUpgrade go1.24-opensslUpgrade go1.24-docUpgrade go1.22Upgrade go1.23-docUpgrade go1.23-openssl-raceUpgrade go1.23-openssl-docUpgrade govulncheck-vulndbUpgrade go1.24Upgrade go1.22-openssl-raceUpgrade go1.23-raceUpgrade go1.24-libstdUpgrade go1.22-raceUpgrade go1.24-raceUpgrade go1.23Upgrade go1.23-opensslUpgrade go1.22-doc | Feb 12, 2025 | Feb 6, 2025 |
| Ubuntu | — | Upgrade golang-1.22-srcUpgrade golang-1.22-goUpgrade golang-1.22 | Jun 20, 2025 | Feb 6, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | Feb 6, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub