CVE:CVE-2019-11841
CNNVD:CNNVD-201905-347
supplementary Go cryptography libraries是一个加密库。
supplementary Go cryptography libraries 2019-03-25版本中的crypto/openpgp/clearsign/clearsign.go文件存在数据伪造问题漏洞。攻击者可利用该漏洞伪造消息头。
solution:Upgrade golang crypto to a higher version than 2019-03-25,and avoid the version 2019-03-25; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0