[ubuntu/noble-security] google-guest-agent 20250116.00-0ubuntu1~24.04.2 (Accepted)

Hlib Korzhynskyy hlib.korzhynskyy at canonical.com
Mon Nov 3 10:04:39 UTC 2025


google-guest-agent (20250116.00-0ubuntu1~24.04.2) noble-security; urgency=medium

  * SECURITY UPDATE: Authorization bypass in SSH protocol
    - debian/extra/vendor/golang.org/x/crypto/ssh/server.go: Change
      maxCachedPubKeys to 1 and change limit checks. Based on:
      https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909
    - CVE-2024-45337

Date: 2025-10-24 12:55:41.698521+00:00
Changed-By: Hlib Korzhynskyy <hlib.korzhynskyy at canonical.com>
https://launchpad.net/ubuntu/+source/google-guest-agent/20250116.00-0ubuntu1~24.04.2
-------------- next part --------------
Sorry, changesfile not available.


More information about the noble-changes mailing list