[Git][security-tracker-team/security-tracker][master] Add CVE-2020-2885{1,2}/golang-golang-x-text

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5d4761cf by Salvatore Bonaccorso at 2021-01-08T19:16:57+01:00
Add CVE-2020-2885{1,2}/golang-golang-x-text

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -12684,9 +12684,14 @@ CVE-2020-28854
 CVE-2020-28853
 	RESERVED
 CVE-2020-28852 (In x/text in Go 1.15.4, a "slice bounds out of range" panic occurs in  ...)
-	TODO: check
+	- golang-golang-x-text <unfixed>
+	- golang-x-text <removed>
+	NOTE: https://github.com/golang/go/issues/42536
+	NOTE: https://github.com/golang/text/commit/4482a914f52311356f6f4b7a695d4075ca22c0c6 (v0.3.5)
 CVE-2020-28851 (In x/text in Go 1.15.4, an "index out of range" panic occurs in langua ...)
-	TODO: check
+	- golang-golang-x-text <unfixed>
+	- golang-x-text <removed>
+	NOTE: https://github.com/golang/go/issues/42535
 CVE-2020-28850
 	RESERVED
 CVE-2020-28849



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5d4761cfb6b73889bad75dba33182fade7d9323f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5d4761cfb6b73889bad75dba33182fade7d9323f
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210108/440aebae/attachment.html>