Fluid Attacks Database

Description

golang.org/x/crypto/ssh/agent doesn't enforce invoking key constraints

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
debian 14	golang-go.crypto	=1:0.25.0-1 \|\| =1:0.33.0-1~exp1 \|\| =1:0.36.0-1~exp1 \|\| =1:0.41.0-1~exp1 \|\| =1:0.42.0-1 \|\| =1:0.42.0-1~exp1 \|\| =1:0.42.0-2 \|\| =1:0.42.0-3 \|\| =1:0.42.0-4 \|\| =1:0.43.0-1 \|\| =1:0.43.0-2 \|\| =1:0.45.0-1 \|\| =1:0.46.0-1 \|\| =1:0.47.0-1 \|\| =1:0.50.0-1 \|\| =1:0.52.0-1~bpo13+1 \|\| >=0 <1:0.52.0-1	1:0.52.0-1
debian 13	golang-go.crypto	=1:0.25.0-1 \|\| =1:0.33.0-1~exp1 \|\| =1:0.36.0-1~exp1 \|\| =1:0.41.0-1~exp1 \|\| =1:0.42.0-1 \|\| =1:0.42.0-1~exp1 \|\| =1:0.42.0-2 \|\| =1:0.42.0-3 \|\| =1:0.42.0-4 \|\| =1:0.43.0-1 \|\| =1:0.43.0-2 \|\| =1:0.45.0-1 \|\| =1:0.46.0-1 \|\| =1:0.47.0-1 \|\| =1:0.50.0-1 \|\| =1:0.52.0-1 \|\| =1:0.52.0-1~bpo13+1 \|\| =1:0.53.0-1 \|\| =1:0.54.0-1 \|\| =1:0.55.0-1	-
rpm rhel10	bootc-image-builder	-	-
rpm rhel9	bootc-image-builder	-	-
rpm rhel8	buildah	-	-
rpm rhel9	buildah	-	-
rpm rhel8	podman	-	-
rpm rhel9	podman	-	-
rpm rhel10	rhel-10.0-bootc-image-builder	-	-
rpm rhel9	rhel-9.6-bootc-image-builder	-	-

1-10 of 14

Aliases

References

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.