SUSE CVE-2025-25199

go-crypto-winnative Go crypto backend for Windows using Cryptography API: Next Generation CNG. Prior to commit f49c8e1379ea4b147d5bff1b3be5b0ff45792e41, calls to cng.TLS1PRF don't release the key handle, producing a small memory leak every time. Commit f49c8e1379ea4b147d5bff1b3be5b0ff45792e41...

GHSA-29C6-3HCJ-89CF go-crypto-winnative BCryptGenerateSymmetricKey memory leak

Calls to cng.TLS1PRF don't release the key handle, producing a small memory leak every time...