Commit 93ecb77
authored
fix: govulncheck-finding-x-crypto (#4245)
```
Vulnerability #1: GO-2026-6355
Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh
More info: https://pkg.go.dev/vuln/GO-2026-6355
Module: golang.org/x/crypto
Found in: golang.org/x/crypto@v0.55.0
Fixed in: golang.org/x/crypto@v0.56.0
Example traces found:
#1: net/redistest/redistest.go:60:51: redistest.newTestRedisWithOptions calls testcontainers.GenericContainer, which eventually calls ssh.NewClientConn
Vulnerability #2: GO-2026-6354
Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh
More info: https://pkg.go.dev/vuln/GO-2026-6354
Module: golang.org/x/crypto
Found in: golang.org/x/crypto@v0.55.0
Fixed in: golang.org/x/crypto@v0.56.0
Example traces found:
#1: net/redistest/redistest.go:60:51: redistest.newTestRedisWithOptions calls testcontainers.GenericContainer, which eventually calls ssh.NewClientConn
```
So only in test supporting packages
Signed-off-by: Sandor Szücs <sandor.szuecs@zalando.de>1 parent fd8b5a0 commit 93ecb77
2 files changed
Lines changed: 3 additions & 3 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
67 | 67 | | |
68 | 68 | | |
69 | 69 | | |
70 | | - | |
| 70 | + | |
71 | 71 | | |
72 | 72 | | |
73 | 73 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
823 | 823 | | |
824 | 824 | | |
825 | 825 | | |
826 | | - | |
827 | | - | |
| 826 | + | |
| 827 | + | |
828 | 828 | | |
829 | 829 | | |
830 | 830 | | |
| |||
0 commit comments