Skip to content
OpenAdvisories
Medium DLA-1840-1 1 CVE

golang-go.crypto - security update

Published Jun 30, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 golang-go.crypto 0.0~hg190-1+deb8u1

Vulnerabilities 1

  • Medium 5.9
    CVE-2019-11840

    golang.org/x/crypto/salsa20/salsa uses insufficiently random values

    An issue was discovered in the supplementary Go cryptography library, golang.org/x/crypto, before v0.0.0-20190320223903-b7391e95e576. A flaw was found in the amd64 implementation of the golang.org/x/crypto/salsa20 and golang.org/x/crypto/salsa20/salsa package…

    k3d k3d-proxy k3d-tools snapd Debian Ubuntu Wolfi Go