[Git][security-tracker-team/security-tracker][master] Mark CVE-2019-11888/golang* as not-affected

Salvatore Bonaccorso carnil at debian.org
Fri May 17 20:31:09 BST 2019



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
70a53a77 by Salvatore Bonaccorso at 2019-05-17T19:29:43Z
Mark CVE-2019-11888/golang* as not-affected

The issue is Windows specific. As such track only the source packages in
unstable, and mark them exceptinally as not-affected.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -547,7 +547,9 @@ CVE-2019-11890
 CVE-2019-11889
 	RESERVED
 CVE-2019-11888 (Go through 1.12.5 on Windows mishandles process creation with a nil en ...)
-	TODO: check
+	- golang-1.12 <not-affected> (Only affects Go on Windows)
+	- golang-1.11 <not-affected> (Only affects Go on Windows)
+	NOTE: https://go-review.googlesource.com/c/go/+/176619
 CVE-2019-11887
 	RESERVED
 CVE-2019-11886 (The WaspThemes Visual CSS Style Editor (aka yellow-pencil-visual-theme ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/70a53a77f66a9d154a5f87d04a7086034fa7751f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/70a53a77f66a9d154a5f87d04a7086034fa7751f
You're receiving this email because of your account on salsa.debian.org.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190517/7c36b174/attachment-0001.html>


More information about the debian-security-tracker-commits mailing list