[security] golang.org/x/crypto fix pre-announcement

[anno...@golang.org]

Hello gophers,

We plan to issue a security fix for the packages golang.org/x/crypto/ssh and golang.org/x/crypto/ssh/agent in the golang.org/x/crypto module during US business hours on Wednesday, November 19.

This will cover the following CVEs:

• CVE-2025-58181
• CVE-2025-47914

Following our security policy, this is the pre-announcement of the fix.

Thanks,
The Go team