Debian/golang-1.15: medium 6.5
The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malic
Action: Upgrade golang-1.15 to 1.15.9-6 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.15.9-6 | - |
Fixed versions
| 1.15.9-6 |
Sources
published · modified · JSON