[Git][security-tracker-team/security-tracker][master] CVE-2021-31525/golang: precise affected versions

[Sylvain Beucler (@beuc)]

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f25605ef by Sylvain Beucler at 2021-07-16T21:51:50+02:00
CVE-2021-31525/golang: precise affected versions

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -12120,6 +12120,8 @@ CVE-2021-31525 (net/http in Go before 1.15.12 and 1.16.x before 1.16.4 allows re
 	NOTE: https://github.com/golang/go/issues/45711 (1.15 backport)
 	NOTE: https://github.com/golang/go/issues/45712 (1.16 backport)
 	NOTE: https://go-review.googlesource.com/c/net/+/313069
+	NOTE: golang: introduced by https://github.com/golang/go/commit/ae080c1aecb129a3230e7afecdb4a16ad3da9b3c (go1.5beta1)
+	NOTE: golang-golang-x-net: introduced by https://github.com/golang/net/commit/5916dcb167ed985a5b9e6871fbfd74848a4c170b
 CVE-2021-26945 (An integer overflow leading to a heap-buffer overflow was found in Ope ...)
 	- openexr <unfixed> (unimportant)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1947591



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f25605efb4b6aee59f62da8a62774ccdab641271

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f25605efb4b6aee59f62da8a62774ccdab641271
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210716/96e9b1dc/attachment.htm>