advisories/25616.adv

type: security
subject: Updated golang packages fix security vulnerability
CVE:
 - CVE-2019-17596
src:
  7:
   core:
     - golang-1.12.11-1.mga7
description: |
  Updated golang packages fix security vulnerability:

  Daniel Mandragona discovered that invalid DSA public keys can cause a panic
  in dsa.Verify(), resulting in denial of service (CVE-2019-17596).
references:
 - https://bugs.mageia.org/show_bug.cgi?id=25616
 - https://groups.google.com/forum/#!msg/golang-announce/lVEm7llp0w0/VbafyRkgCgAJ
 - https://www.debian.org/security/2019/dsa-4551
ID: MGASA-2019-0310
1	type: security
2	subject: Updated golang packages fix security vulnerability
3	CVE:
4	- CVE-2019-17596
5	src:
6	7:
7	core:
8	- golang-1.12.11-1.mga7
9	description: \|
10	Updated golang packages fix security vulnerability:
11
12	Daniel Mandragona discovered that invalid DSA public keys can cause a panic
13	in dsa.Verify(), resulting in denial of service (CVE-2019-17596).
14	references:
15	- https://bugs.mageia.org/show_bug.cgi?id=25616
16	- https://groups.google.com/forum/#!msg/golang-announce/lVEm7llp0w0/VbafyRkgCgAJ
17	- https://www.debian.org/security/2019/dsa-4551
18	ID: MGASA-2019-0310