Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
9c2998f9 by Salvatore Bonaccorso at 2019-08-15T19:50:06Z
Track fixes for three CVEs affecting golang-1.11
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -710,7 +710,7 @@ CVE-2019-14810
CVE-2019-14809 (net/url in Go before 1.11.13 and 1.12.x before 1.12.8
mishandles malfo ...)
- golang-1.13 <unfixed>
- golang-1.12 1.12.8-1
- - golang-1.11 <unfixed>
+ - golang-1.11 1.11.13-1
- golang-1.8 <removed>
- golang-1.7 <removed>
- golang <removed>
@@ -16916,7 +16916,7 @@ CVE-2019-9515 (Some HTTP/2 implementations are
vulnerable to a settings flood, p
CVE-2019-9514 (Some HTTP/2 implementations are vulnerable to a reset flood,
potential ...)
- golang-1.13 <unfixed>
- golang-1.12 1.12.8-1
- - golang-1.11 <unfixed>
+ - golang-1.11 1.11.13-1
- golang-1.8 <removed>
- golang-1.7 <removed>
- golang <removed>
@@ -16928,7 +16928,7 @@ CVE-2019-9513 (Some HTTP/2 implementations are
vulnerable to resource loops, pot
CVE-2019-9512 (Some HTTP/2 implementations are vulnerable to ping floods,
potentially ...)
- golang-1.13 <unfixed>
- golang-1.12 1.12.8-1
- - golang-1.11 <unfixed>
+ - golang-1.11 1.11.13-1
- golang-1.8 <removed>
- golang-1.7 <removed>
- golang <removed>
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/9c2998f9eb2c2c6b59229bdee14fddecc04e05b9
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/9c2998f9eb2c2c6b59229bdee14fddecc04e05b9
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
