Summary
Jakub Ciolek and Nicola Murino discovered that Go Cryptography incorrectly
handled SSH agent responses. An attacker could use this to cause a denial
of service. (CVE-2025-47913)
Yuichi Watanabe discovered that Go Cryptography incorrectly handled SSH
key exchanges. An attacker could use this to cause a denial of service.
(CVE-2025-22869)
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 25.10 | golang-go.crypto | 1:0.25.0-1ubuntu0.1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | golang-go.crypto | 1:0.0~git20151201.0.7b85b09-2ubuntu0.1~esm3 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | golang-go.crypto | 1:0.0~git20170629.0.5ef0053-2ubuntu0.1~esm3 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | golang-go.crypto | 1:0.0~git20200221.2aa609c-1ubuntu0.1~esm3 |
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | golang-go.crypto | 1:0.0~git20211202.5770296-1ubuntu0.1~esm3 |
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | golang-go.crypto | 1:0.19.0-1ubuntu0.1~esm3 |