Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 544
Alerts This Week
Warning Icon 1 544

Ubuntu Go Cryptography Important Denial of Service Issues USN-8447-1

ubuntu
Calendar Grey June 17, 2026
Scroller Ubuntu Esm H88
Critical security issues in Go Cryptography for Ubuntu's latest versions addressed. Urgent updates recommended for user protection.
Several security issues were fixed in Go Cryptography.

Summary

Several security issues were fixed in Go Cryptography.

Software Description:

- golang-go.crypto: Supplementary Go cryptography libraries

Details:

It was discovered that Go Cryptography did not properly handle SSH global

request responses. A remote attacker could possibly use this issue to cause

a denial of service. (CVE-2026-39830)

It was discovered that Go Cryptography did not properly verify user

presence when using FIDO/U2F security keys. An attacker could possibly use

this issue to bypass user presence verification for hardware security keys.

This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04

LTS, and Ubuntu 26.04 LTS. (CVE-2026-39831)

It was discovered that Go Cryptography did not properly serialize SSH agent

key constraint extensions. An attacker could possibly use this issue to

bypass intended key usage restrictions. This issue only affected Ubuntu

20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS.

(CVE-2026-39832)

It was discov...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu important SSH go cryptography

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  golang-golang-x-crypto-dev      1:0.47.0-1ubuntu0.1~esm1
                                  Available with Ubuntu Pro

Ubuntu 24.04 LTS
  golang-golang-x-crypto-dev      1:0.19.0-1ubuntu0.1~esm2
                                  Available with Ubuntu Pro

Ubuntu 22.04 LTS
  golang-golang-x-crypto-dev      1:0.0~git20211202.5770296-1ubuntu0.1~esm2
                                  Available with Ubuntu Pro

Ubuntu 20.04 LTS
  golang-golang-x-crypto-dev      1:0.0~git20200221.2aa609c-1ubuntu0.1~esm2
                                  Available with Ubuntu Pro

Ubuntu 18.04 LTS
  golang-go.crypto-dev            1:0.0~git20170629.0.5ef0053-2ubuntu0.1~esm2
                                  Available with Ubuntu Pro
  golang-golang-x-crypto-dev      1:0.0~git20170629.0.5ef0053-2ubuntu0.1~esm2
                                  Available with Ubuntu Pro

Ubuntu 16.04 LTS
  golang-go.crypto-dev            1:0.0~git20151201.0.7b85b09-2ubuntu0.1~esm2
                                  Available with Ubuntu Pro
  golang-golang-x-crypto-dev      1:0.0~git20151201.0.7b85b09-2ubuntu0.1~esm2
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-8447-1

CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833,

CVE-2026-39834, CVE-2026-42508, CVE-2026-46595

Severity
important
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-8447-1

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu important SSH go cryptography

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.