UbuntuUpdates.org

Package "golang-go.crypto"

Name: golang-go.crypto

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • Supplementary Go cryptography libraries
Latest version: 1:0.25.0-1ubuntu0.1
Release: questing (25.10)
Level: security
Repository: universe

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "golang-go.crypto" in Questing

Repository Area Version
base universe 1:0.25.0-1
updates universe 1:0.25.0-1ubuntu0.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1:0.25.0-1ubuntu0.1 2026-07-09 11:08:10 UTC

  golang-go.crypto (1:0.25.0-1ubuntu0.1) questing-security; urgency=medium

  * SECURITY UPDATE: denial of service via unexpected SSH agent response
    - debian/patches/CVE-2025-47913.patch: return an error when the agent
      replies with an unexpected message type instead of panicking.
    - CVE-2025-47913
  * SECURITY UPDATE: denial of service via KEX packet queue exhaustion
    - debian/patches/CVE-2025-22869.patch: limit the internal packet queue
      during key exchange and block writes when full.
    - CVE-2025-22869

 -- Vyom Yadav <email address hidden> Tue, 07 Jul 2026 17:50:21 +0530
CVE-2025-47913 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.
CVE-2025-22869 SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly,


About   -   Send Feedback to @ubuntu_updates