Debian/golang-go.crypto: critical 9.1
A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. The blocked goroutine could not be released by calling Close(), re
Action: Upgrade golang-go.crypto to 1:0.52.0-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:0.52.0-1 | - |
Fixed versions
| 1:0.52.0-1 |
Sources
- osv: DEBIAN-CVE-2026-39830#Debian:14/golang-go.crypto
- https://security-tracker.debian.org/tracker/CVE-2026-39830
published · modified · JSON