Author: anarcat
Date: 2017-10-27 14:59:58 +0000 (Fri, 27 Oct 2017)
New Revision: 57021
Modified:
data/CVE/list
Log:
update CVE-2017-15041: no full build required, and patch
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2017-10-27 14:46:17 UTC (rev 57020)
+++ data/CVE/list 2017-10-27 14:59:58 UTC (rev 57021)
@@ -2092,10 +2092,11 @@
CVE-2017-15041 (Go before 1.8.4 and 1.9.x before 1.9.1 allows "go
get" remote command ...)
- golang-1.9 1.9.1-1
- golang-1.8 1.8.4-1
- [stretch] - golang-1.8 <ignored> (Minor issue, would require builds of
all go packages in stable)
+ [stretch] - golang-1.8 <ignored> (Minor issue)
- golang-1.7 <unfixed>
- [stretch] - golang-1.7 <ignored> (Minor issue, would require builds of
all go packages in stable)
+ [stretch] - golang-1.7 <ignored> (Minor issue)
- golang <removed>
+ NOTE:
https://go.googlesource.com/go/+/a4544a0f8af001d1fb6df0e70750f570ec49ccf9%5E%21/
NOTE: https://github.com/golang/go/issues/22125
NOTE: https://golang.org/cl/68022
NOTE: https://golang.org/cl/68190
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
