Skip to content
OpenAdvisories
Unscored DSA-4551-1 1 CVE

golang-1.11 - security update

Published Oct 25, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 golang-1.11 1.11.6-1+deb10u3

Vulnerabilities 1

  • Unscored —
    CVE-2019-17596 Public exploit

    Panic on invalid DSA public keys in crypto/dsa

    Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key. There are several attack scenarios, such as traffic from a client to a server that verifies client certificates.

    golang go stdlib golang-1.8 Ubuntu Azure Linux Alpine Go