[enkrs]

Wouldn’t building on non-vulnerable system also compile the bibary with non-vulnerable instructions? Does a non AVX512 system really build an executable that calls AVX512?

[zaarn]

OpenSSL does a lot of runtime detection of what a system is capable of, so I would suspect this can happen.