go
/
vulndb
зеркало из https://github.com/golang/vulndb.git
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность
vulndb/data/osv/GO-2021-0065.json

65 строки
1.6 KiB
JSON
Исходник Постоянная ссылка Обычный вид История

data/osv: add OSV entries for all reports Create data/osv, containing the OSV version for all reports. This directory will be used as the source for database generation in the future. Set creation times on all existing reports; future reports will take the creation time from the OSV entry history. Change-Id: Ibe0f3a9fc76c0d4afee8102d6a0fd35c7641e97d Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/430682 Run-TryBot: Damien Neil <dneil@google.com> TryBot-Result: Gopher Robot <gobot@golang.org> Reviewed-by: Tatiana Bradley <tatiana@golang.org>
2022-09-14 01:40:34 +03:00
{
internal/osv, all: move DatabaseSpecific osv field Moves DatabaseSpecific to be a field of the top-level osv.Entry, instead of a subfield of the Affected field. Change-Id: I8c80f8af268b51d57833268b89947838c53e407a Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/481136 Run-TryBot: Tatiana Bradley <tatianabradley@google.com> Reviewed-by: Julie Qiu <julieqiu@google.com> Reviewed-by: Tatiana Bradley <tatianabradley@google.com> TryBot-Result: Gopher Robot <gobot@golang.org>
2023-03-31 23:44:23 +03:00
"schema_version": "1.3.1",
data/osv: add OSV entries for all reports Create data/osv, containing the OSV version for all reports. This directory will be used as the source for database generation in the future. Set creation times on all existing reports; future reports will take the creation time from the OSV entry history. Change-Id: Ibe0f3a9fc76c0d4afee8102d6a0fd35c7641e97d Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/430682 Run-TryBot: Damien Neil <dneil@google.com> TryBot-Result: Gopher Robot <gobot@golang.org> Reviewed-by: Tatiana Bradley <tatiana@golang.org>
2022-09-14 01:40:34 +03:00
"id": "GO-2021-0065",
"modified": "0001-01-01T00:00:00Z",
internal/osv, all: move DatabaseSpecific osv field Moves DatabaseSpecific to be a field of the top-level osv.Entry, instead of a subfield of the Affected field. Change-Id: I8c80f8af268b51d57833268b89947838c53e407a Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/481136 Run-TryBot: Tatiana Bradley <tatianabradley@google.com> Reviewed-by: Julie Qiu <julieqiu@google.com> Reviewed-by: Tatiana Bradley <tatianabradley@google.com> TryBot-Result: Gopher Robot <gobot@golang.org>
2023-03-31 23:44:23 +03:00
"published": "2021-04-14T20:04:52Z",
data/osv: add OSV entries for all reports Create data/osv, containing the OSV version for all reports. This directory will be used as the source for database generation in the future. Set creation times on all existing reports; future reports will take the creation time from the OSV entry history. Change-Id: Ibe0f3a9fc76c0d4afee8102d6a0fd35c7641e97d Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/430682 Run-TryBot: Damien Neil <dneil@google.com> TryBot-Result: Gopher Robot <gobot@golang.org> Reviewed-by: Tatiana Bradley <tatiana@golang.org>
2022-09-14 01:40:34 +03:00
"aliases": [
data/reports: add missing GHSAs These GHSAs were found by a modification of the behavior of vulnreport fix. Change-Id: I72415e876d84d30f81896108421d5bf998018c4f Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/466576 Reviewed-by: Tim King <taking@google.com> TryBot-Result: Gopher Robot <gobot@golang.org> Reviewed-by: Tatiana Bradley <tatianabradley@google.com> Run-TryBot: Tatiana Bradley <tatianabradley@google.com>
2023-02-08 21:03:32 +03:00
"CVE-2019-11250",
"GHSA-jmrx-5g74-6v2f"
data/osv: add OSV entries for all reports Create data/osv, containing the OSV version for all reports. This directory will be used as the source for database generation in the future. Set creation times on all existing reports; future reports will take the creation time from the OSV entry history. Change-Id: Ibe0f3a9fc76c0d4afee8102d6a0fd35c7641e97d Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/430682 Run-TryBot: Damien Neil <dneil@google.com> TryBot-Result: Gopher Robot <gobot@golang.org> Reviewed-by: Tatiana Bradley <tatiana@golang.org>
2022-09-14 01:40:34 +03:00
],
internal/{osv,report}, data: publish summaries to OSV Modify ToOSV to publish the summary from the YAML report to OSV, and apply this change to each existing OSV report. For golang/go#56443 Change-Id: Iee78fe75f42fe9a52c6e4023ee9ad8dfa5feba8d Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/501203 Run-TryBot: Tatiana Bradley <tatianabradley@google.com> TryBot-Result: Gopher Robot <gobot@golang.org> Reviewed-by: Damien Neil <dneil@google.com>
2023-06-06 21:13:32 +03:00
"summary": "Unauthorized credential disclosure in k8s.io/kubernetes and k8s.io/client-go",
internal/database, data/osv: trim whitespace characters in OSV description In GenerateOSVEntry, replace all whitespace characters with single spaces except for paragraph breaks represented by "\n\n". Change-Id: Ia03f0b53c94979fada6316be1346df3f48b9fabe Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/439044 Run-TryBot: Tatiana Bradley <tatiana@golang.org> Reviewed-by: Damien Neil <dneil@google.com> TryBot-Result: Gopher Robot <gobot@golang.org> Reviewed-by: Tatiana Bradley <tatiana@golang.org>
2022-10-05 19:05:17 +03:00
"details": "Authorization tokens may be inappropriately logged if the verbosity level is set to a debug level.",
data/osv: add OSV entries for all reports Create data/osv, containing the OSV version for all reports. This directory will be used as the source for database generation in the future. Set creation times on all existing reports; future reports will take the creation time from the OSV entry history. Change-Id: Ibe0f3a9fc76c0d4afee8102d6a0fd35c7641e97d Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/430682 Run-TryBot: Damien Neil <dneil@google.com> TryBot-Result: Gopher Robot <gobot@golang.org> Reviewed-by: Tatiana Bradley <tatiana@golang.org>
2022-09-14 01:40:34 +03:00
"affected": [
{
"package": {
"name": "k8s.io/client-go",
"ecosystem": "Go"
},
"ranges": [
{
"type": "SEMVER",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.17.0"
}
]
}
],
"ecosystem_specific": {
"imports": [
{
"path": "k8s.io/client-go/transport",
"symbols": [
data/reports: add vulnerable_at to GO-2021-0065.yaml Aliases: CVE-2019-11250 Updates golang/vulndb#65 Change-Id: I0b3b58acec9cce8ab298d9be9f1982757e7f8d3b Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/462617 Reviewed-by: Tatiana Bradley <tatiana@golang.org> TryBot-Result: Gopher Robot <gobot@golang.org> Auto-Submit: Tatiana Bradley <tatiana@golang.org> Run-TryBot: Tatiana Bradley <tatiana@golang.org> Reviewed-by: Damien Neil <dneil@google.com>
2023-01-18 19:35:44 +03:00
"basicAuthRoundTripper.RoundTrip",
"bearerAuthRoundTripper.RoundTrip",
"debuggingRoundTripper.RoundTrip",
"impersonatingRoundTripper.RoundTrip",
"userAgentRoundTripper.RoundTrip"
data/osv: add OSV entries for all reports Create data/osv, containing the OSV version for all reports. This directory will be used as the source for database generation in the future. Set creation times on all existing reports; future reports will take the creation time from the OSV entry history. Change-Id: Ibe0f3a9fc76c0d4afee8102d6a0fd35c7641e97d Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/430682 Run-TryBot: Damien Neil <dneil@google.com> TryBot-Result: Gopher Robot <gobot@golang.org> Reviewed-by: Tatiana Bradley <tatiana@golang.org>
2022-09-14 01:40:34 +03:00
]
}
]
}
}
],
"references": [
{
"type": "FIX",
"url": "https://github.com/kubernetes/kubernetes/pull/81330"
},
{
"type": "FIX",
"url": "https://github.com/kubernetes/kubernetes/commit/4441f1d9c3e94d9a3d93b4f184a591cab02a5245"
},
{
"type": "WEB",
"url": "https://github.com/kubernetes/kubernetes/issues/81114"
}
internal/report, data/osv: populate schema_version field in osv entries The vulnreport osv command now populates all generated osvs with the current schema version (1.3.1). This CL also updates all previous OSV entries to also have the current schema version. Change-Id: Ie95c91aae0ee623bbf50ff047190a0bbe59893d9 Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/452440 TryBot-Result: Gopher Robot <gobot@golang.org> Reviewed-by: Tatiana Bradley <tatiana@golang.org> Run-TryBot: Maceo Thompson <maceothompson@google.com>
2022-11-21 21:47:08 +03:00
],
internal/osv, all: move DatabaseSpecific osv field Moves DatabaseSpecific to be a field of the top-level osv.Entry, instead of a subfield of the Affected field. Change-Id: I8c80f8af268b51d57833268b89947838c53e407a Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/481136 Run-TryBot: Tatiana Bradley <tatianabradley@google.com> Reviewed-by: Julie Qiu <julieqiu@google.com> Reviewed-by: Tatiana Bradley <tatianabradley@google.com> TryBot-Result: Gopher Robot <gobot@golang.org>
2023-03-31 23:44:23 +03:00
"database_specific": {
data: apply REVIEWED status to all existing reports and osv Change-Id: I862c5bb24b9c08c29f0d437fd1be61da0319ef0d Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/585517 LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com> Reviewed-by: Damien Neil <dneil@google.com>
2024-05-14 22:19:00 +03:00
"url": "https://pkg.go.dev/vuln/GO-2021-0065",
"review_status": "REVIEWED"
internal/osv, all: move DatabaseSpecific osv field Moves DatabaseSpecific to be a field of the top-level osv.Entry, instead of a subfield of the Affected field. Change-Id: I8c80f8af268b51d57833268b89947838c53e407a Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/481136 Run-TryBot: Tatiana Bradley <tatianabradley@google.com> Reviewed-by: Julie Qiu <julieqiu@google.com> Reviewed-by: Tatiana Bradley <tatianabradley@google.com> TryBot-Result: Gopher Robot <gobot@golang.org>
2023-03-31 23:44:23 +03:00
}
data/osv: add OSV entries for all reports Create data/osv, containing the OSV version for all reports. This directory will be used as the source for database generation in the future. Set creation times on all existing reports; future reports will take the creation time from the OSV entry history. Change-Id: Ibe0f3a9fc76c0d4afee8102d6a0fd35c7641e97d Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/430682 Run-TryBot: Damien Neil <dneil@google.com> TryBot-Result: Gopher Robot <gobot@golang.org> Reviewed-by: Tatiana Bradley <tatiana@golang.org>
2022-09-14 01:40:34 +03:00
}