Package
k3s-static-1.34
Component
golang.org/x/crypto
Latest update
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Justification
Impact
The affected code is golang.org/x/crypto/ssh's server-side connection handshake (NewServerConn, serverAuthenticate). This package ships an SSH client only. Confirmed by parsing the built binary's function table directly, since these binaries are stripped - x/crypto/ssh contributes zero linked functions on either architecture, while sibling x/crypto subpackages that are genuinely used (openpgp) are present with hundreds of functions.
Status