Описание
For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| golang-go.crypto | fixed | 1:0.52.0-1 | package | |
| golang-go.crypto | no-dsa | trixie | package | |
| golang-go.crypto | postponed | bookworm | package | |
| golang-go.crypto | postponed | bullseye | package |
Примечания
https://www.openwall.com/lists/oss-security/2026/05/22/6
https://github.com/golang/go/issues/79596
Связанные уязвимости
For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used.
For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used.
For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used.
Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent
golang.org/x/crypto: Invoking pathological inputs can lead to client panic