CVE-2025-25199

CVE-2025-25199 concerns the go-crypto-winnative Go crypto backend for Windows (CNG). Root cause: prior to commit f49c8e1379ea4b147d5bff1b3be5b0ff45792e41, calls to cng.TLS1PRF did not release the key handle, causing a small memory leak per use. The fix is included in the Microsoft Go builds of ve...

openSUSE Security Update : libssh2_org (openSUSE-2015-242)

libssh2org was updated to version 1.5.0 to fix bugs and a security issue. Changes in 1.5.0: Added Windows Cryptography API: Next Generation based backend Bug fixes : - Security Advisory: Using SSHMSGKEXINIT data unbounded, CVE-2015-1782 - missing libssh2error in libssh2channelwrite - knownhost: F...