[Git][security-tracker-team/security-tracker][master] add golang packages present in oldstable as <removed>

Moritz Muehlenhoff jmm at debian.org
Wed Jul 15 12:01:10 BST 2020



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
98076146 by Moritz Muehlenhoff at 2020-07-15T13:00:39+02:00
add golang packages present in oldstable as <removed>

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -419,6 +419,9 @@ CVE-2020-15586
 	RESERVED
 	- golang-1.14 <unfixed>
 	- golang-1.11 <removed>
+	- golang-1.8 <removed>
+	- golang-1.7 <removed>
+	- golang <removed>
 	NOTE: https://groups.google.com/g/golang-announce/c/XZNfaiwgt2w/m/E6gHDs32AQAJ
 CVE-2020-15585
 	RESERVED
@@ -4176,7 +4179,6 @@ CVE-2020-14039
 	- golang-1.14 <not-affected> (Windows-specific)
 	- golang-1.11 <not-affected> (Windows-specific)
 	NOTE: https://groups.google.com/g/golang-announce/c/XZNfaiwgt2w/m/E6gHDs32AQAJ
-	TODO: check older versions than golang-1.11
 CVE-2020-XXXX [Editor: Ensure latest comments can only be viewed from public posts]
 	- wordpress 5.4.2+dfsg1-1 (bug #962685)
 	[buster] - wordpress 5.0.10+dfsg1-0+deb10u1
@@ -20816,11 +20818,13 @@ CVE-2020-7919 (Go before 1.12.16 and 1.13.x before 1.13.7 (and the crypto/crypto
 	- golang-1.13 1.13.7-1
 	- golang-1.11 <removed>
 	[buster] - golang-1.11 <postponed> (Minor issue, can be fixed along in next DSA)
+	- golang-1.8 <removed>
+	- golang-1.7 <removed>
+	- golang <removed>
 	NOTE: https://github.com/golang/go/issues/36837
 	NOTE: https://github.com/golang/go/commit/b13ce14c4a6aa59b7b041ad2b6eed2d23e15b574 (master)
 	NOTE: https://github.com/golang/go/issues/36838 (Go 1.13)
 	NOTE: https://github.com/golang/go/commit/f938e06d0623d0e1de202575d16f1e126741f6e0 (go1.13.7)
-	TODO: check older versions than golang-1.11
 CVE-2020-7918 (An insecure direct object reference in webmail in totemo totemomail 7. ...)
 	NOT-FOR-US: totemo totemomail
 CVE-2020-7917



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/980761461e297d2b9bdfa1e67988762685c018a8

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/980761461e297d2b9bdfa1e67988762685c018a8
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200715/360b44fd/attachment.html>


More information about the debian-security-tracker-commits mailing list