x/vulndb: potential Go vuln in github.com/google/fscrypt: CVE-2022-25327

[GoVulnBot]

In CVE-2022-25327, the reference URL github.com/google/fscrypt (and possibly others) refers to something in Go.

• PR: Metadata validation and other security improvements google/fscrypt#346

module: github.com/google/fscrypt
package: fscrypt
description: |
    The PAM module for fscrypt doesn't adequately validate fscrypt metadata files, allowing users to create malicious metadata files that prevent other users from logging in. A local user can cause a denial of service by creating a fscrypt metadata file that prevents other users from logging into the system. We recommend upgrading to version 0.3.3 or above
cves:
  - CVE-2022-25327
credit: Matthias Gerstner of SUSE
links:
    pr: https://github.com/google/fscrypt/pull/346

See doc/triage.md for instructions on how to triage this report.

[neild]

See #339: Importable package, but effectively internal.

[gopherbot]

Change https://go.dev/cl/514875 mentions this issue: data/excluded: update GO-2022-0340.yaml to add GHSA

[gopherbot]

Change https://go.dev/cl/592767 mentions this issue: data/reports: unexclude 50 reports

[gopherbot]

Change https://go.dev/cl/607216 mentions this issue: data/reports: unexclude 20 reports (14)