Overview
About vulnerability
The in-memory keyring returned by NewKeyring() silently accepted keys with the ConfirmBeforeUse constraint but never enforced it. The key would sign without any confirmation prompt, with no indication to the caller that the constraint was not in effect. NewKeyring() now returns an error when unsupported constraints are requested.Details
- Affected product:
- 42wim/httpsig , Azure/azure-amqp-common-go , Azure/azure-event-hubs-go , Azure/azure-pipeline-go , Azure/azure-sdk-for-go/sdk/azcore , Azure/azure-sdk-for-go/sdk/azidentity , Azure/azure-sdk-for-go/sdk/internal , Azure/azure-sdk-for-go/sdk/keyvault/azkeys , Azure/azure-sdk-for-go/sdk/keyvault/internal , Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute , Azure/azure-sdk-for-go/sdk/resourcemanager/internal , Azure/azure-sdk-for-go/sdk/resourcemanager/managementgroups/armmanagementgroups , Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork , Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources , Azure/azure-sdk-for-go/sdk/storage/azblob , Azure/azure-service-bus-go , Azure/azure-storage-blob-go , Azure/azure-storage-queue-go , Azure/go-autorest/autorest , Azure/go-autorest/autorest/adal , Azure/go-autorest/autorest/azure/auth , Azure/go-autorest/autorest/azure/cli , Azure/go-autorest/autorest/to , Azure/go-autorest/autorest/validation , Azure/kubelogin , FZambia/eagle , FiloSottile/age , GoogleCloudPlatform/cloud-sql-proxy/cloudsql-proxy , GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric , Grafana , IBM/go-sdk-core , IBM/ibm-cos-sdk-go , IBM/sarama , Loki , Masterminds/sprig , MinIO , PagerDuty/go-pagerduty , ProtonMail/go-crypto , RocketChat/Rocket.Chat.Go.SDK , TritonDataCenter/triton-go , WireGuard/wgctrl-go/wgctrl , aead/minisign , apache/arrow-go , apache/arrow/go , apache/arrow/go/arrow , apache/cassandra-gocql-driver/gocql , appscode/go , argocd , argoproj/gitops-engine , argoproj/notifications-engine , argoproj/pkg , at-wat/mqtt-go , benmathews/bench , bketelsen/crypt , bufbuild/protoc-gen-validate , bwmarrin/discordgo , caddyserver/caddy , caddyserver/certmagic , census-ecosystem/opencensus-go-exporter-aws/aws , census-ecosystem/opencensus-go-exporter-ocagent/ocagent , census-ecosystem/opencensus-go-exporter-prometheus/prometheus , census-ecosystem/opencensus-go-exporter-stackdriver/stackdriver , census-instrumentation/opencensus-go , census-instrumentation/opencensus-proto , centrifugal/centrifuge , centrifugal/protocol , cloudflare/circl , cncf/udpa/go , cncf/xds/go , cockroachdb/datadriven , cockroachdb/errors , connectrpc/connect-go , containerd/continuity , coredns/coredns , coreos/go-oidc , cortexproject/cortex , crewjam/saml , cue.gerrithub/cue-lang/cue , davidmz/go-pageant , denisenkom/go-mssqldb , dgraph-io/badger , dhui/dktest , digitalocean/godo , dlmiddlecote/sqlstats , docker/go-metrics , dominikh/go-tools/tools , drone-runners/drone-runner-docker , drone/runner-go , elastic/apm-agent-go , elastic/apm-agent-go/module/apmhttp , elastic/apm-agent-go/module/apmot , elastic/go-fastjson , elazarl/goproxy , eliasnaur/gio , envoyproxy/go-control-plane , envoyproxy/go-control-plane/xdsmatcher , etcd-io/etcd , etcd-io/etcd/api , etcd-io/etcd/client , etcd-io/etcd/pkg , etcd-io/etcd/raft , etcd-io/etcd/server , fraugster/parquet-go , fsouza/fake-gcs-server , fullstorydev/grpchan , gabriel-vasile/mimetype , getsentry/sentry-go , gfleury/go-bitbucket-v1 , gin-gonic/gin , gitea/go-sdk/gitea , gitlab-org/api/client-go , glinton/ping , go-acme/lego , go-fed/httpsig , go-git/go-billy , go-git/go-git , go-jose/go-jose , go-kit/kit , go-ldap/ldap , go-macaron/binding , go-openapi/analysis , go-openapi/loads , go-openapi/runtime , go-openapi/strfmt , go-openapi/validate , go-playground/validator , go-redis/cache , gobuffalo/depgen , gobuffalo/envy , gobuffalo/genny , gobuffalo/gogen , gobuffalo/logger , gobuffalo/packr , gobuffalo/plushgen , gobuffalo/pop , goccy/go-yaml , goftp/server , gogo/protobuf , gogo/status , golang-migrate/migrate , golang/appengine , golang/mock , golang/protobuf , gomodules/notify , gonum/exp/gonum , gonum/exp/plot , google/cel-go , google/cel-spec , google/gnostic , google/go-cloud , google/go-github , google/go-replayers/grpcreplay , google/go-replayers/httpreplay , google/martian , google/s2a-go , googleapis/enterprise-certificate-proxy , googleapis/gax-go , googleapis/go-genproto , googleapis/go-genproto/googleapis/api , googleapis/go-genproto/googleapis/bytestream , googleapis/go-genproto/googleapis/rpc , googleapis/google-api-go-client , googleapis/google-cloud-go , googleapis/google-cloud-go-testing , googleapis/google-cloud-go/accessapproval , googleapis/google-cloud-go/accesscontextmanager , googleapis/google-cloud-go/aiplatform , googleapis/google-cloud-go/analytics , googleapis/google-cloud-go/apigateway , googleapis/google-cloud-go/apigeeconnect , googleapis/google-cloud-go/apigeeregistry , googleapis/google-cloud-go/appengine , googleapis/google-cloud-go/area120 , googleapis/google-cloud-go/artifactregistry , googleapis/google-cloud-go/asset , googleapis/google-cloud-go/assuredworkloads , googleapis/google-cloud-go/auth , googleapis/google-cloud-go/auth/oauth2adapt , googleapis/google-cloud-go/automl , googleapis/google-cloud-go/baremetalsolution , googleapis/google-cloud-go/batch , googleapis/google-cloud-go/beyondcorp , googleapis/google-cloud-go/bigquery , googleapis/google-cloud-go/bigtable , googleapis/google-cloud-go/billing , googleapis/google-cloud-go/binaryauthorization , googleapis/google-cloud-go/certificatemanager , googleapis/google-cloud-go/channel , googleapis/google-cloud-go/cloudbuild , googleapis/google-cloud-go/clouddms , googleapis/google-cloud-go/cloudtasks , googleapis/google-cloud-go/compute , googleapis/google-cloud-go/contactcenterinsights , googleapis/google-cloud-go/container , googleapis/google-cloud-go/containeranalysis , googleapis/google-cloud-go/datacatalog , googleapis/google-cloud-go/dataflow , googleapis/google-cloud-go/dataform , googleapis/google-cloud-go/datafusion , googleapis/google-cloud-go/datalabeling , googleapis/google-cloud-go/dataplex , googleapis/google-cloud-go/dataproc , googleapis/google-cloud-go/dataqna , googleapis/google-cloud-go/datastore , googleapis/google-cloud-go/datastream , googleapis/google-cloud-go/deploy , googleapis/google-cloud-go/dialogflow , googleapis/google-cloud-go/dlp , googleapis/google-cloud-go/documentai , googleapis/google-cloud-go/domains , googleapis/google-cloud-go/edgecontainer , googleapis/google-cloud-go/errorreporting , googleapis/google-cloud-go/essentialcontacts , googleapis/google-cloud-go/eventarc , googleapis/google-cloud-go/filestore , googleapis/google-cloud-go/firestore , googleapis/google-cloud-go/functions , googleapis/google-cloud-go/gkebackup , googleapis/google-cloud-go/gkeconnect , googleapis/google-cloud-go/gkehub , googleapis/google-cloud-go/gkemulticloud , googleapis/google-cloud-go/grafeas , googleapis/google-cloud-go/gsuiteaddons , googleapis/google-cloud-go/iam , googleapis/google-cloud-go/iap , googleapis/google-cloud-go/ids , googleapis/google-cloud-go/iot , googleapis/google-cloud-go/kms , googleapis/google-cloud-go/language , googleapis/google-cloud-go/lifesciences , googleapis/google-cloud-go/logging , googleapis/google-cloud-go/longrunning , googleapis/google-cloud-go/managedidentities , googleapis/google-cloud-go/maps , googleapis/google-cloud-go/mediatranslation , googleapis/google-cloud-go/memcache , googleapis/google-cloud-go/metastore , googleapis/google-cloud-go/monitoring , googleapis/google-cloud-go/networkconnectivity , googleapis/google-cloud-go/networkmanagement , googleapis/google-cloud-go/networksecurity , googleapis/google-cloud-go/notebooks , googleapis/google-cloud-go/optimization , googleapis/google-cloud-go/orchestration , googleapis/google-cloud-go/orgpolicy , googleapis/google-cloud-go/osconfig , googleapis/google-cloud-go/oslogin , googleapis/google-cloud-go/phishingprotection , googleapis/google-cloud-go/policytroubleshooter , googleapis/google-cloud-go/privatecatalog , googleapis/google-cloud-go/pubsub , googleapis/google-cloud-go/pubsublite , googleapis/google-cloud-go/recaptchaenterprise , googleapis/google-cloud-go/recommendationengine , googleapis/google-cloud-go/recommender , googleapis/google-cloud-go/redis , googleapis/google-cloud-go/resourcemanager , googleapis/google-cloud-go/resourcesettings , googleapis/google-cloud-go/retail , googleapis/google-cloud-go/run , googleapis/google-cloud-go/scheduler , googleapis/google-cloud-go/secretmanager , googleapis/google-cloud-go/security , googleapis/google-cloud-go/securitycenter , googleapis/google-cloud-go/servicedirectory , googleapis/google-cloud-go/shell , googleapis/google-cloud-go/spanner , googleapis/google-cloud-go/speech , googleapis/google-cloud-go/storage , googleapis/google-cloud-go/storagetransfer , googleapis/google-cloud-go/talent , googleapis/google-cloud-go/texttospeech , googleapis/google-cloud-go/tpu , googleapis/google-cloud-go/trace , googleapis/google-cloud-go/translate , googleapis/google-cloud-go/video , googleapis/google-cloud-go/videointelligence , googleapis/google-cloud-go/vision , googleapis/google-cloud-go/vmmigration , googleapis/google-cloud-go/vmwareengine , googleapis/google-cloud-go/vpcaccess , googleapis/google-cloud-go/webrisk , googleapis/google-cloud-go/websecurityscanner , googleapis/google-cloud-go/workflows , googlesource/crypto , googlesource/exp , googlesource/lint , googlesource/mobile , googlesource/mod , googlesource/net , googlesource/protobuf , googlesource/tools , gopcua/opcua , gophercloud/gophercloud , gopkg.in/macaron.v1 , gopkg.in/resty.v1 , gopkg.in/telebot.v3 , gosnmp/gosnmp , gotestyourself/gotest.tools , grafana/alerting , grafana/authlib , grafana/cloudflare-go , grafana/dataplane/examples , grafana/dataplane/sdata , grafana/dskit , grafana/e2e , grafana/grafana-app-sdk , grafana/grafana-aws-sdk , grafana/grafana-azure-sdk-go , grafana/grafana-cloud-migration-snapshot , grafana/grafana-google-sdk-go , grafana/grafana-live-sdk , grafana/grafana-openapi-client-go , grafana/grafana-plugin-sdk-go , grafana/grafana/apps/alerting/notifications , grafana/grafana/apps/investigation , grafana/grafana/apps/playlist , grafana/grafana/pkg/aggregator , grafana/grafana/pkg/apimachinery , grafana/grafana/pkg/apiserver , grafana/grafana/pkg/promlib , grafana/grafana/pkg/storage/unified/apistore , grafana/grafana/pkg/storage/unified/resource , grafana/kindsys , grafana/loki/pkg/push , grafana/pyroscope/api , grafana/sqlds , grafana/tempo , grafana/thema , grpc-ecosystem/go-grpc-middleware , grpc-ecosystem/go-grpc-middleware/providers/kit , grpc-ecosystem/go-grpc-middleware/providers/prometheus , grpc-ecosystem/go-grpc-prometheus , grpc-ecosystem/grpc-gateway , grpc/grpc-go , grpc/grpc-go/cmd/protoc-gen-go-grpc , grpc/grpc-go/examples , grpc/grpc-go/stats/opentelemetry , gulducat/go-run-programs , harness/drone-cli , hashi-derek/grpc-proxy , hashicorp/consul , hashicorp/consul/api , hashicorp/consul/envoyextensions , hashicorp/consul/proto-public , hashicorp/consul/troubleshoot , hashicorp/go-discover , hashicorp/go-metrics , hashicorp/go-msgpack , hashicorp/go-plugin , hashicorp/go-raftchunking , hashicorp/go-secure-stdlib/parseutil , hashicorp/go-secure-stdlib/password , hashicorp/go-secure-stdlib/tlsutil , hashicorp/go-sockaddr , hashicorp/hcdiag , hashicorp/hcl , hashicorp/hcp-scada-provider , hashicorp/hcp-sdk-go , hashicorp/mdns , hashicorp/memberlist , hashicorp/net-rpc-msgpackrpc , hashicorp/raft , hashicorp/raft-autopilot , hashicorp/raft-boltdb , hashicorp/raft-wal , hashicorp/serf , hashicorp/vault-plugin-auth-alicloud , hashicorp/vault/api , hashicorp/vault/api/auth/gcp , hashicorp/vault/sdk , heroku/x , improbable-eng/grpc-web , influxdata/flux , influxdata/influxdb , influxdata/influxdb-client-go , influxdata/influxql , influxdata/promql , influxdata/tdigest , influxdata/telegraf , iris-contrib/jade , iris-contrib/pongo2 , jackc/pgconn , jackc/pgmock , jackc/pgtype , jackc/pgx , jaegertracing/jaeger , jcmturner/gokrb5 , jcmturner/rpc , jhump/goprotoc , jhump/protoreflect , jsimonetti/rtnetlink , kataras/iris , kataras/neffos , kisielk/errcheck , ktrysmt/go-bitbucket , kubernetes-sigs/apiserver-network-proxy/konnectivity-client , kubernetes-sigs/controller-runtime , kubernetes-sigs/kustomize/api , kubernetes-sigs/kustomize/kyaml , kubernetes/api , kubernetes/apiextensions-apiserver , kubernetes/apimachinery , kubernetes/apiserver , kubernetes/cli-runtime , kubernetes/client-go , kubernetes/code-generator , kubernetes/component-base , kubernetes/component-helpers , kubernetes/controller-manager , kubernetes/kms , kubernetes/kube-aggregator , kubernetes/kube-openapi , kubernetes/kubectl , kubernetes/kubernetes , labstack/echo , leoluk/perflib_exporter , lestrrat-go/jwx , lightstep/lightstep-tracer-common/golang/gogo , lightstep/lightstep-tracer-go , linode/linodego , luna-duclos/instrumentedsql , lyft/protoc-gen-star , m3dbx/prometheus_remote_client_golang , marten-seemann/qtls , mattn/go-ieproxy , mdlayher/genetlink , mdlayher/netlink , mdlayher/socket , mdlayher/vsock , microsoft/go-mssqldb , miekg/dns , minio/colorjson , minio/pkg , minio/sio , mitchellh/cli , mithrandie/csvq , mithrandie/csvq-driver , moby/term , mongodb/mongo-go-driver , nats-io/jwt , nats-io/nats-server , nats-io/nats-streaming-server , nats-io/nats.go , nats-io/nkeys , nats-io/stan.go , nhooyr/websocket-old , oapi-codegen/oapi-codegen , oapi-codegen/runtime , onsi/ginkgo , onsi/gomega , open-telemetry/opentelemetry-collector , open-telemetry/opentelemetry-collector/pdata , open-telemetry/opentelemetry-go-contrib/instrumentation/google.golang.org/grpc/otelgrpc , open-telemetry/opentelemetry-go-contrib/samplers/jaegerremote , open-telemetry/opentelemetry-go/exporters/otlp/otlptrace , open-telemetry/opentelemetry-go/exporters/otlp/otlptrace/otlptracegrpc , open-telemetry/opentelemetry-go/exporters/otlp/otlptrace/otlptracehttp , open-telemetry/opentelemetry-proto-go/otlp , openfga/api/proto , openfga/language/pkg/go , openfga/openfga , opentracing-contrib/go-grpc , openzipkin-contrib/zipkin-go-opentracing , openzipkin/zipkin-go , opsgenie/opsgenie-go-sdk-v2 , ory/dockertest , ory/fosite , ory/go-acc , ory/herodot , ory/jsonschema , ory/viper , ory/x , parca-dev/parca/connectrpc/go , pkg/sftp , planetscale/vtprotobuf , pressly/goose , prometheus/alertmanager , prometheus/client_golang , prometheus/common , prometheus/common/sigv4 , prometheus/exporter-toolkit , prometheus/node_exporter , prometheus/prom2json , prometheus/prometheus , prometheus/sigv4 , prometheus/statsd_exporter , quic-go/quic-go , redis/go-redis/redis , redis/rueidis , sacloud/libsacloud , sagikazarmark/crypt , sagikazarmark/locafero , scottlepp/go-duck , secure-io/sio-go , securego/gosec , sercand/kuberesolver , skeema/knownhosts , smartystreets/goconvey , soheilhy/cmux , spf13/afero , spf13/cobra , spf13/viper , spiffe/go-spiffe , square/go-jose , substrait-io/substrait-go , thanos-io/objstore , thanos-io/thanos , twmb/franz-go , twmb/franz-go/pkg/kadm , twmb/franz-go/pkg/kfake , twmb/franz-go/plugin/kotel , twmb/franz-go/plugin/kprom , uber-go/goleak , uber-go/multierr , uber-go/zap , unknwon/com , vektra/mockery , vmihailenco/msgpack , weaveworks/common , xanzy/go-gitlab , xanzy/ssh-agent , xorm/core , xorm/xorm , zclconf/go-cty , zclconf/go-cty-debug , zx2c4/wireguard-go
- Affected packages:
- golang.org/x/crypto @ 0.18.0 (+1373 more)