Skip to content
OpenAdvisories
Medium DLA-1920-1 1 CVE

golang-go.crypto - security update

Published Sep 13, 2019 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 8 golang-go.crypto 0.0~hg190-1+deb8u2

Vulnerabilities 1

  • Medium 5.9

    Golang/x/crypto message forgery vulnerability

    A message-forgery issue was discovered in crypto/openpgp/clearsign/clearsign.go in supplementary Go cryptography libraries 2019-03-25. According to the OpenPGP Message Format specification in RFC 4880 chapter 7, a cleartext signed message can contain one or m…