[Secure-testing-commits] r51944 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Thu May 25 07:54:09 UTC 2017


Author: carnil
Date: 2017-05-25 07:54:09 +0000 (Thu, 25 May 2017)
New Revision: 51944

Modified:
   data/CVE/list
Log:
Add CVE-2017-8932/golang*

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-05-25 07:42:11 UTC (rev 51943)
+++ data/CVE/list	2017-05-25 07:54:09 UTC (rev 51944)
@@ -751,8 +751,12 @@
 	- perltidy 20140328-2 (bug #862667)
 	[jessie] - perltidy <no-dsa> (Minor issue; can be fixed via point release)
 	[wheezy] - perltidy <no-dsa> (Minor issue)
-CVE-2017-8932
+CVE-2017-8932 [Elliptic curves carry propagation issue in x86-64 P-256]
 	RESERVED
+	- golang-1.7 <unfixed>
+	- golang <removed>
+	NOTE: Upstream issue: https://github.com/golang/go/issues/20040
+	NOTE: Upstream patch: https://golang.org/cl/41070
 CVE-2017-8931
 	RESERVED
 CVE-2017-8930 (Multiple cross-site request forgery (CSRF) vulnerabilities in Simple ...)




More information about the Secure-testing-commits mailing list