Mike Gabriel pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
765e7444 by Mike Gabriel at 2019-05-29T10:34:35Z
CVE-2017-3204/golang-go.crypt: Setup from <no-dsa> to <ignored>
according to NOTEs.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -130236,7 +130236,7 @@ CVE-2017-3205
RESERVED
CVE-2017-3204 (The Go SSH library (x/crypto/ssh) by default does not verify
host keys ...)
- golang-go.crypto
1:0.0~git20170407.0.55a552f+REALLY.0.0~git20161012.0.5f31782-1 (bug #859655)
- [jessie] - golang-go.crypto <no-dsa> (In jessie no rdeps using SSH,
that version doesn't even support host key validation)
+ [jessie] - golang-go.crypto <ignored> (In jessie no rdeps using SSH,
that version doesn't even support host key validation)
NOTE:
https://github.com/golang/crypto/commit/e4e2799dd7aab89f583e1d898300d96367750991
NOTE: https://github.com/golang/go/issues/19767
CVE-2017-3203 (The Java implementations of AMF3 deserializers in
Pivotal/Spring Sprin ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/765e744445c781ffe157ca3e03f5b32fe52ce611
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/765e744445c781ffe157ca3e03f5b32fe52ce611
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
