Back Linuxsecurity

Fedora 43: golang-github-crypto-6 CVE-2025

Linuxsecurity •LinuxSecurity Advisories • December 30, 2025

Share: View original

A Go implementation of JSON Web Tokens. Update Information : Rebuilt for CVE-2025-61723

A Go implementation of JSON Web Tokens.

Rebuilt for CVE-2025-61723

* Sun Dec 21 2025 W. Michael Petullo - 5.2.1-6 - Rebuilt for CVE-2025-61723

[ 1 ] Bug #2410650 - CVE-2025-58185 golang-github-jwt-5: Parsing DER payload can cause memory exhaustion in encoding/asn1 [fedora-43]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-12b00d8e2c' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora Updates for CVE-2025-61723 Affect golang-github-jwt and golang-github-crypto Fedora has released updates for the golang-github-jwt and golang-github-crypto packages due to vulnerabilities identified as CVE-2025-61723. The updates were rebuilt to address these security issues, affecting users of Fedora 42 and Fedora 43. The updates were made available on December 21, 2025, with specific versions noted for each package. 2 sources 24

Extracted Entities

CVEs (2)

CVE-2025-58185 CVE-2025-61723