[Git][security-tracker-team/security-tracker][master] CVE-2017-3204/golang-go.crypt: Setup from <no-dsa> to <ignored> according to NOTEs.

[Mike Gabriel]

Mike Gabriel pushed to branch master at Debian Security Tracker / security-tracker


Commits:
765e7444 by Mike Gabriel at 2019-05-29T10:34:35Z
CVE-2017-3204/golang-go.crypt: Setup from <no-dsa> to <ignored> according to NOTEs.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -130236,7 +130236,7 @@ CVE-2017-3205
 	RESERVED
 CVE-2017-3204 (The Go SSH library (x/crypto/ssh) by default does not verify host keys ...)
 	- golang-go.crypto 1:0.0~git20170407.0.55a552f+REALLY.0.0~git20161012.0.5f31782-1 (bug #859655)
-	[jessie] - golang-go.crypto <no-dsa> (In jessie no rdeps using SSH, that version doesn't even support host key validation)
+	[jessie] - golang-go.crypto <ignored> (In jessie no rdeps using SSH, that version doesn't even support host key validation)
 	NOTE: https://github.com/golang/crypto/commit/e4e2799dd7aab89f583e1d898300d96367750991
 	NOTE: https://github.com/golang/go/issues/19767
 CVE-2017-3203 (The Java implementations of AMF3 deserializers in Pivotal/Spring Sprin ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/765e744445c781ffe157ca3e03f5b32fe52ce611

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/765e744445c781ffe157ca3e03f5b32fe52ce611
You're receiving this email because of your account on salsa.debian.org.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190529/7df10473/attachment.html>