—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA512
– ————————————————————————-
Debian Security Advisory DSA-4380-1 security@debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
February 01, 2019 https://www.debian.org/security/faq
– ————————————————————————-
Package : golang-1.8
CVE ID : CVE-2018-6574 CVE-2018-7187 CVE-2019-6486
A vulnerability was discovered in the implementation of the P-521 and
P-384 elliptic curves, which could result in denial of service and in
some cases key recovery.
In addition this update fixes two vulnerabilities in “go get”, which
could result in the execution of arbitrary shell commands.
For the stable distribution (stretch), these problems have been fixed in
version 1.8.1-1+deb9u1.
We recommend that you upgrade your golang-1.8 packages.
For the detailed security status of golang-1.8 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/golang-1.8
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org
—–BEGIN PGP SIGNATURE—–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=UpGP
—–END PGP SIGNATURE—–
—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA512
– ————————————————————————-
Debian Security Advisory DSA-4379-1 security@debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
February 01, 2019 https://www.debian.org/security/faq
– ————————————————————————-
Package : golang-1.7
CVE ID : CVE-2018-7187 CVE-2019-6486
A vulnerability was discovered in the implementation of the P-521 and
P-384 elliptic curves, which could result in denial of service and in
some cases key recovery.
In addition this update fixes a vulnerability in “go get”, which could
result in the execution of arbitrary shell commands.
For the stable distribution (stretch), these problems have been fixed in
version 1.7.4-2+deb9u1.
We recommend that you upgrade your golang-1.7 packages.
For the detailed security status of golang-1.7 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/golang-1.7
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org
—–BEGIN PGP SIGNATURE—–
iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAlxUWR4ACgkQEMKTtsN8
TjZ/0BAApdfVPQqB+u41M8kB6OB3t5960fj3kMwSzSzaWI459Wbm6s38ebgAUGoY
805Hua4BEhPok+Ck23s7G/oanHXtzu9WewifXvJFvbQCTvanAiRpTARU1DiFaSRp
19fNeOev8Ngs84NfyNvAycTBSMhLSrjLDragO+oWxpR7SpWVd6FBoFJuPZULAdvR
8rBX23W+1AnES6aHDPmgSmz1DuuP4ZYaN+Zq1r9OFlUoP/SOMVfmUEvXY+B8/+L8
mkxkvzEbghnyM6uMBgiWyD4S0EyS2op4JvhvdSgjQexvpLBVNPAcpLMLGML0mv+d
U7bqnFFnU+NH6a8IxQoNwP2LYcWHqGG3eD3PXIaHn5Eq9yNI/6hdVEdJ4S89Tk7S
G58kZoT8wSuE1pGnepQA2dfdVdkYe9VhHeQ7kn0d2bNoq+Jk68RWdGB8ltEsQf0J
TUSslzlnD9r692dz8s4SAAyDAtW0L1ldROetR6rjfThx3vHfRIEhMVPLo+rcYY/l
gQVANVVogIma7jLa0uUm4dIlycQZGOb9HXJpN6ENayhxdqJ2htzvsSJbrgUrBfAS
drWs2loi8eC8uc302/+9v3BS8oUNWWhydH6TCBiTcR6W2k82/GQZV2hndJ+yEZOH
I0SGJSdXXeZvpte4qr0rimkgw56kTebcJ0/GMsQwp88Ri0kgVAw=
=zOod
—–END PGP SIGNATURE—–
