Skip to content

chore(deps): update module golang.org/x/crypto to v0.43.0 [security] - autoclosed - #2136

Closed
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/go-golang.org-x-crypto-vulnerability
Closed

chore(deps): update module golang.org/x/crypto to v0.43.0 [security] - autoclosed#2136
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/go-golang.org-x-crypto-vulnerability

Conversation

@renovate

@renovate renovate Bot commented Nov 19, 2025

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
golang.org/x/crypto v0.42.0 -> v0.43.0 age confidence

Potential denial of service in golang.org/x/crypto/ssh/agent

CVE-2025-47913 / GO-2025-4116

More information

Details

SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.

Severity

Unknown

References

This data is provided by OSV and the Go Vulnerability Database (CC-BY 4.0).


Configuration

📅 Schedule: Branch creation - "" in timezone Etc/UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Nov 19, 2025
@renovate

renovate Bot commented Nov 19, 2025

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: e2e/go.sum
Command failed: install-tool golang 1.24.10

@renovate renovate Bot changed the title chore(deps): update module golang.org/x/crypto to v0.43.0 [security] chore(deps): update module golang.org/x/crypto to v0.43.0 [security] - autoclosed Nov 19, 2025
@renovate renovate Bot closed this Nov 19, 2025
@renovate
renovate Bot deleted the renovate/go-golang.org-x-crypto-vulnerability branch November 19, 2025 15:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants