[Secure-testing-commits] r57021 - data/CVE

[Antoine Beaupré]

Author: anarcat
Date: 2017-10-27 14:59:58 +0000 (Fri, 27 Oct 2017)
New Revision: 57021

Modified:
   data/CVE/list
Log:
update CVE-2017-15041: no full build required, and patch

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-10-27 14:46:17 UTC (rev 57020)
+++ data/CVE/list	2017-10-27 14:59:58 UTC (rev 57021)
@@ -2092,10 +2092,11 @@
 CVE-2017-15041 (Go before 1.8.4 and 1.9.x before 1.9.1 allows "go get" remote command ...)
 	- golang-1.9 1.9.1-1
 	- golang-1.8 1.8.4-1
-	[stretch] - golang-1.8 <ignored> (Minor issue, would require builds of all go packages in stable)
+	[stretch] - golang-1.8 <ignored> (Minor issue)
 	- golang-1.7 <unfixed>
-	[stretch] - golang-1.7 <ignored> (Minor issue, would require builds of all go packages in stable)
+	[stretch] - golang-1.7 <ignored> (Minor issue)
 	- golang <removed>
+	NOTE: https://go.googlesource.com/go/+/a4544a0f8af001d1fb6df0e70750f570ec49ccf9%5E%21/
 	NOTE: https://github.com/golang/go/issues/22125
 	NOTE: https://golang.org/cl/68022
 	NOTE: https://golang.org/cl/68190