USN-8447-1 golang-go.crypto vulnerabilities

It was discovered that Go Cryptography did not properly handle SSH global request responses. A remote attacker could possibly use this issue to cause a denial of service. CVE-2026-39830 It was discovered that Go Cryptography did not properly verify user presence when using FIDO/U2F security keys...

Linux Distros Unpatched Vulnerability : CVE-2026-39832

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When adding a key to a remote agent constraint extensions such as [email protected] were not serialized in the request. Destination...

CVE-2026-39832

CVE-2026-39832 affects the golang.org/x/crypto/ssh/agent package in the Go ecosystem. When adding a key to a remote SSH agent, constraint extensions such as [email protected] were not serialized in the request, causing destination restrictions to be silently stripped when forwa...