Back Linuxsecurity

Ubuntu 25.10 Go Cryptography Important Denial of Service Vuln USN-8519

Linuxsecurity •LinuxSecurity Advisories • July 9, 2026

Go Cryptography could be made to crash if it received specially crafted network traffic. Software Description: - golang-go.crypto: Supplementary Go cryptography libraries Details: Jakub Ciolek and Nicola Murino discovered that Go Cryptography incorrectly handled SSH agent responses. An attacker could use this to cause a denial of service. (CVE-2025-47913) Yuichi Watanabe discovered that Go Cryptography incorrectly handled SSH key exchanges. An attacker could use this to cause a denial of service. (CVE-2025-22869)

Go Cryptography could be made to crash if it received specially crafted

Software Description:

- golang-go.crypto: Supplementary Go cryptography libraries

Jakub Ciolek and Nicola Murino discovered that Go Cryptography incorrectly

handled SSH agent responses. An attacker could use this to cause a denial

of service. (CVE-2025-47913)

Yuichi Watanabe discovered that Go Cryptography incorrectly handled SSH

key exchanges. An attacker could use this to cause a denial of service.

The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 golang-golang-x-crypto-dev 1:0.25.0-1ubuntu0.1 Ubuntu 24.04 LTS golang-golang-x-crypto-dev 1:0.19.0-1ubuntu0.1~esm3 Available with Ubuntu Pro Ubuntu 22.04 LTS golang-golang-x-crypto-dev 1:0.0~git20211202.5770296-1ubuntu0.1~esm3 Available with Ubuntu Pro Ubuntu 20.04 LTS golang-golang-x-crypto-dev 1:0.0~git20200221.2aa609c-1ubuntu0.1~esm3 Available with Ubuntu Pro Ubuntu 18.04 LTS golang-go.crypto-dev 1:0.0~git20170629.0.5ef0053-2ubuntu0.1~esm3 Available with Ubuntu Pro golang-golang-x-crypto-dev 1:0.0~git20170629.0.5ef0053-2ubuntu0.1~esm3 Available with Ubuntu Pro Ubuntu 16.04 LTS golang-go.crypto-dev 1:0.0~git20151201.0.7b85b09-2ubuntu0.1~esm3 Available with Ubuntu Pro golang-golang-x-crypto-dev 1:0.0~git20151201.0.7b85b09-2ubuntu0.1~esm3 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.

CVE-2025-22869, CVE-2025-47913

Ubuntu Security Notice USN-8519-1

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SUSE Linux Podman Vulnerabilities Lead to Denial of Service Risks Recent updates for SUSE Linux Podman have addressed multiple denial of service vulnerabilities. Key issues include CVE-2026-34986, which involves crafted JWE input that can cause DoS, and CVE-2026-39827, which leads to a memory leak when rejecting channels. Other vulnerabilities, such as CVE-2026-39828 and CVE-2026-39829, allow for certificate restriction bypass and DoS through pathological RSA/DSA parameters. These vulnerabilities affect systems using Podman, particularly versions of SUSE Linux and openSUSE. The vulnerabilities were published between April and May 2026, with patches released on July 3, 2026. Users are advised to update their systems to mitigate these risks. 4 sources 58

Extracted Entities

CVEs (2)

CVE-2025-22869 CVE-2025-47913