Hi,

The following vulnerability was published for golang-github-gopacket-gopacket.

CVE-2026-65819[0]:
| gopacket provides packet processing capabilities for Go. Through
| version 1.7.0, multiple layer decoders use attacker-controlled
| lengths, counts, or offsets before validating them against packet
| buffers, allowing a crafted packet decoded through
| DecodingLayerParser or DecodeFromBytes to trigger an unrecovered
| panic and remotely deny service.  A patch commit is available at
| 210f25f.


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2026-65819
https://www.cve.org/CVERecord?id=CVE-2026-65819
[1] https://github.com/gopacket/gopacket/security/advisories/GHSA-8mcr-459q-5mx2
[2] https://github.com/gopacket/gopacket/commit/210f25fb9b3ca1af2eb649936f78ad6991b6c9c5

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore