Vulnerability Bulletins

DSA-4534 golang-1.11 - security update

   
Affected software Debian
 
It was discovered that the Go programming language did accept andnormalize invalid HTTP/1.1 headers with a space before the colon, whichcould lead to filter bypasses or request smuggling in some setups.

More info:

https://www.debian.org/security/2019/dsa-4534