Go/golang.org/x/crypto CVE-2020-29652: unknown, EPSS 3.18%
Panic on crafted authentication request message in golang.org/x/crypto/ssh
Action: Upgrade golang.org/x/crypto to 0.0.0-20201216223049-8b5274cf687f or later.
go get golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687fAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0.0.0-20201216223049-8b5274cf687f |
Sources
- osv: GO-2021-0227
- https://go.dev/cl/278852
- https://go.googlesource.com/crypto/+/8b5274cf687fd9316b4108863654cc57385531e8
- https://groups.google.com/g/golang-announce/c/ouZIlBimOsE?pli=1
CVE-2020-29652 · published · modified · JSON