Граф коммитов

997 Коммитов

Автор SHA1 Сообщение Дата
Tatiana Bradley f0441fd318 data/reports: add vulnerable_at to GO-2020-0007.yaml
Aliases: CVE-2017-18367, GHSA-58v3-j75h-xr49

Updates golang/vulndb#7

Change-Id: I566617e7fd9df18d0fe377847b02d8cbd5ce6ac0
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/465176
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Damien Neil <dneil@google.com>
Run-TryBot: Tatiana Bradley <tatianabradley@google.com>
Reviewed-by: Tim King <taking@google.com>
2023-02-06 16:20:01 +00:00
Tatiana Bradley b76345a101 data/reports: add vulnerable_at to GO-2021-0101.yaml
Aliases: CVE-2019-0210, GHSA-jq7p-26h5-w78r

Updates golang/vulndb#101

Change-Id: I1b688d09c2608cdd6f13d987c796c0e419179e63
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/465183
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Tim King <taking@google.com>
Run-TryBot: Tatiana Bradley <tatianabradley@google.com>
2023-02-06 16:18:38 +00:00
Tatiana Bradley 6fdbe6f389 data/reports: add vulnerable_at to GO-2021-0104.yaml
Aliases: CVE-2021-28681, GHSA-74xm-qj29-cq8p

Updates golang/vulndb#104

Change-Id: I542dbf322397998463555c5eeac3c950ab2a93c2
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/465182
Run-TryBot: Tatiana Bradley <tatianabradley@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Tim King <taking@google.com>
2023-02-06 16:18:04 +00:00
Tatiana Bradley a5f78dd22d data/reports: add vulnerable_at to GO-2021-0106.yaml
Aliases: CVE-2020-36566, GHSA-jpf8-h7h7-3ppm

Updates golang/vulndb#106

Change-Id: I20ed408d1797c564aeaedb83603786daefde1c75
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/465181
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Tim King <taking@google.com>
Run-TryBot: Tatiana Bradley <tatianabradley@google.com>
2023-02-06 16:16:46 +00:00
Tatiana Bradley a9d74d0f79 data/reports: add vulnerable_at to GO-2021-0113.yaml
Aliases: CVE-2021-38561, GHSA-ppp9-7jff-5vj2

Updates golang/vulndb#113

Change-Id: I1b6108e968286216b1e353987e59da0fb9c0acc5
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/465180
Reviewed-by: Tim King <taking@google.com>
Run-TryBot: Tatiana Bradley <tatianabradley@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
2023-02-06 16:15:44 +00:00
Tatiana Bradley 2fc0ee00d2 data/reports: add vulnerable_at to GO-2021-0227.yaml
Aliases: CVE-2020-29652

Updates golang/vulndb#227

Change-Id: I596dd614fab9ec50299d151bf395ca3439601e76
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/465179
Reviewed-by: Tim King <taking@google.com>
Run-TryBot: Tatiana Bradley <tatianabradley@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
2023-02-06 16:15:26 +00:00
Tatiana Bradley 751df622de data/reports: add vulnerable_at to some reports
Change-Id: I731920f60f900b06dbc3512c4624dac81caaf2f0
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/465184
Run-TryBot: Tatiana Bradley <tatianabradley@google.com>
Reviewed-by: Tim King <taking@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
2023-02-06 16:14:36 +00:00
Zvonimir Pavlinovic b9638e6227 all_test: remove TestMissingReports
Updates golang/go#56139

Change-Id: I6288b65cb073730b6069512b0259a0a1e09519ed
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/464935
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Run-TryBot: Zvonimir Pavlinovic <zpavlinovic@google.com>
2023-02-02 21:53:37 +00:00
Tatiana Bradley 7876d99c1c data/reports: add vulnerable_at to GO-2020-0027.yaml
Additionally fix packages and symbols

Aliases: CVE-2018-6558, GHSA-qj26-7grj-whg3

Updates golang/vulndb#27

Change-Id: I11bcc36c230158c5e5a334da84d063a7e5e69fb5
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/464895
Auto-Submit: Tatiana Bradley <tatianabradley@google.com>
Run-TryBot: Tatiana Bradley <tatianabradley@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Tim King <taking@google.com>
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
2023-02-02 19:37:40 +00:00
Tim King 47fa79d681 data/reports: apply vulnreport fix to 0113
Change-Id: If8300491d03b08130a7fe616ef85f09491810e6e
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/464024
Run-TryBot: Tim King <taking@google.com>
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
2023-02-02 17:52:29 +00:00
Tim King ed38bf91cc data/reports: apply vulnreport fix to 1184
Change-Id: I2627e1036d0168e67d37ef09f17448c3243ee6c1
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/464026
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
Run-TryBot: Tim King <taking@google.com>
2023-02-02 17:11:54 +00:00
Tim King 1ecf85566b data/reports: apply vulnreport fix to 1185 1502
Change-Id: I45470468a49e8ab01d1c6bb8dc694da154709470
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/464029
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
Run-TryBot: Tim King <taking@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
2023-02-02 17:11:34 +00:00
Tim King 7c2e4ff07b data/reports: apply vulnreport fix to 0368 0940 1100
Change-Id: I294e92cc4d96d25fbb667cb3f34a2ee72433431b
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/464028
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
Run-TryBot: Tim King <taking@google.com>
2023-02-02 17:11:07 +00:00
Tim King 2ba7d24a0e data/reports: apply vulnreport fix to 1113
Change-Id: I87e18155e7787b8b5fe026b3e838289027797c7f
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/464027
Run-TryBot: Tim King <taking@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
2023-02-02 17:06:34 +00:00
Tim King bea303a059 data/reports: apply vulnreport fix to 1143
Change-Id: I02e9942cdac8ef12afd5bbb787117d6b88f0d60f
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/464025
Run-TryBot: Tim King <taking@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
2023-02-02 17:05:35 +00:00
Julie Qiu 6bbce1a38b data/excluded: batch add GO-2023-1493
Fixes golang/vulndb#1493

Change-Id: If2d97c53bd18bdc44b5b3cf5976678454d7e20cd
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/464476
Auto-Submit: Tatiana Bradley <tatianabradley@google.com>
Auto-Submit: Julie Qiu <julieqiu@google.com>
Reviewed-by: Julie Qiu <julieqiu@google.com>
Run-TryBot: Julie Qiu <julie@golang.org>
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
Run-TryBot: Julie Qiu <julieqiu@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
2023-02-02 16:38:32 +00:00
Julie Qiu 141e74cebf data/reports: update GO-2023-1295.yaml
Add missing symbols

Fixes golang/vulndb#1295

Change-Id: I76718ce23a11c2ea4dc64fee322ebea67e9f11bd
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/464537
Auto-Submit: Julie Qiu <julieqiu@google.com>
Run-TryBot: Julie Qiu <julieqiu@google.com>
Reviewed-by: Julie Qiu <julieqiu@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Auto-Submit: Tatiana Bradley <tatianabradley@google.com>
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
2023-02-02 16:37:57 +00:00
Julie Qiu c0964740b2 data/reports: update GO-2023-1494.yaml
For golang/vulndb#1494

Change-Id: I6d91b7a4c1cb73f3124ab024a6d33190aaf71bdb
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/464536
Auto-Submit: Julie Qiu <julieqiu@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Run-TryBot: Julie Qiu <julieqiu@google.com>
Reviewed-by: Julie Qiu <julieqiu@google.com>
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
Auto-Submit: Tatiana Bradley <tatianabradley@google.com>
2023-02-02 16:37:54 +00:00
Julie Qiu a06b976966 data/reports: add GO-2023-1497.yaml
Aliases: CVE-2022-23538, GHSA-7p8m-22h4-9pj7

Fixes golang/vulndb#1497

Change-Id: I9238971a6292d3bdc10bffbef99cb7fc10c5dd40
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/464304
Auto-Submit: Julie Qiu <julieqiu@google.com>
Reviewed-by: Julie Qiu <julieqiu@google.com>
Run-TryBot: Julie Qiu <julieqiu@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
2023-02-01 23:23:36 +00:00
Julie Qiu 97c35d169f data/reports: add GO-2023-1494.yaml
Aliases: CVE-2014-125064, GHSA-g7mw-9pf9-p2pm

Fixes golang/vulndb#1494

Change-Id: Ib99a2e0d06d5163fe17db7e095514d827fda3caf
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/464303
Run-TryBot: Julie Qiu <julieqiu@google.com>
Reviewed-by: Julie Qiu <julieqiu@google.com>
Auto-Submit: Julie Qiu <julieqiu@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
2023-02-01 23:23:34 +00:00
Julie Qiu 25617d6e34 data/reports: add GO-2023-1295.yaml
Aliases: CVE-2020-36645, GHSA-3hc7-2xcc-7p8f

Fixes golang/vulndb#1295

Change-Id: I9947d523e7f9aa3b28e0a5b7641e140a858d1216
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/464302
TryBot-Result: Gopher Robot <gobot@golang.org>
Run-TryBot: Julie Qiu <julieqiu@google.com>
Auto-Submit: Julie Qiu <julieqiu@google.com>
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
Run-TryBot: Julie Qiu <julie@golang.org>
Reviewed-by: Julie Qiu <julieqiu@google.com>
2023-02-01 23:19:27 +00:00
Tim King 06fe3c11c9 data/reports: apply vulnreport fix to populate SkipFix
Adding todos for SkipFix fields where needed.

Change-Id: I224e8f9b1cc7a02136c3f9608296dc4378f65cc9
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/464017
TryBot-Result: Gopher Robot <gobot@golang.org>
Run-TryBot: Tim King <taking@google.com>
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
2023-02-01 22:18:28 +00:00
Tim King 2d19bb57ae internal/report: adds SkipFix field to Package
New SkipFix field on report.Package indicates that a package
should not be automatically updated by vulnreport fix.

vulnreport fix now automatically adds a todo message if this
field and Module.VulnerableAt are both empty.

Lint rules will come later.

Change-Id: I574539362cf334cdc9fee59f036e1de8e5b5bd6e
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/464016
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
Run-TryBot: Tim King <taking@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
2023-02-01 21:39:14 +00:00
Tatiana Bradley 766e59ff3a data/reports: add vulnerable_at to GO-2022-0435.yaml
Aliases: CVE-2022-28327

Updates golang/vulndb#435

Change-Id: Ibe158f3a76cee5dcbcb2e50ba841384c01ab5a7e
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/463678
Run-TryBot: Tatiana Bradley <tatianabradley@google.com>
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
Reviewed-by: Tim King <taking@google.com>
Auto-Submit: Tatiana Bradley <tatianabradley@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
2023-02-01 21:25:25 +00:00
Julie Qiu 30aee1cbc9 data/reports: add missing alias to GO-2023-1495.yaml
Aliases: CVE-2022-41721, GHSA-fxg5-wq6x-vr4w

Updates golang/vulndb#1495
Fixes golang/vulndb#1507

Change-Id: I1dec284a79c4e52195d1e07a2d878bb840d50041
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/464318
Auto-Submit: Julie Qiu <julieqiu@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
Reviewed-by: Julie Qiu <julieqiu@google.com>
Run-TryBot: Julie Qiu <julieqiu@google.com>
Run-TryBot: Tatiana Bradley <tatianabradley@google.com>
2023-01-31 21:39:17 +00:00
Julie Qiu c9eaa27075 data/reports: add missing alias to GO-2022-1144.yaml
Aliases: CVE-2022-41717, GHSA-xrjj-mj9h-534m

Updates golang/vulndb#1144
Fixes golang/vulndb#1501

Change-Id: Ib2313bdf9ae45f2f138fcc637392606a60be5759
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/464317
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
Run-TryBot: Tatiana Bradley <tatianabradley@google.com>
Auto-Submit: Julie Qiu <julieqiu@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Run-TryBot: Julie Qiu <julieqiu@google.com>
Reviewed-by: Julie Qiu <julieqiu@google.com>
2023-01-31 21:39:15 +00:00
Julie Qiu 395ce963e4 data/excluded: batch add excluded reports
Add reports:
- GO-2023-1509
- GO-2023-1506
- GO-2023-1504
- GO-2023-1502
- GO-2023-1492
- GO-2023-1491
- GO-2023-1388
- GO-2023-1377
- GO-2023-1500
- GO-2023-1499
- GO-2023-1498
- GO-2023-1496
- GO-2023-1468
- GO-2023-1466
- GO-2023-1463
- GO-2023-1283

Fixes golang/vulndb#1509
Fixes golang/vulndb#1506
Fixes golang/vulndb#1504
Fixes golang/vulndb#1502
Fixes golang/vulndb#1492
Fixes golang/vulndb#1491
Fixes golang/vulndb#1388
Fixes golang/vulndb#1377
Fixes golang/vulndb#1500
Fixes golang/vulndb#1499
Fixes golang/vulndb#1498
Fixes golang/vulndb#1496
Fixes golang/vulndb#1468
Fixes golang/vulndb#1466
Fixes golang/vulndb#1463
Fixes golang/vulndb#1283

Change-Id: Ibe656933231f6f86ad496bd2d1a6c1c506c504cc
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/464316
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
Run-TryBot: Tatiana Bradley <tatianabradley@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Julie Qiu <julieqiu@google.com>
Run-TryBot: Julie Qiu <julieqiu@google.com>
Auto-Submit: Julie Qiu <julieqiu@google.com>
2023-01-31 21:39:06 +00:00
Tatiana Bradley a7f50feb26 data/reports: fix GO-2021-0085.yaml
Add vulnerable_at, symbols, and fix packages

Aliases: CVE-2019-16884, GHSA-fgv8-vj5c-2ppq

Updates golang/vulndb#85

Change-Id: I38fafcb65c74a36cde3add37858ea3fbd606ae51
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/463682
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
Run-TryBot: Tatiana Bradley <tatianabradley@google.com>
Auto-Submit: Tatiana Bradley <tatianabradley@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Tim King <taking@google.com>
2023-01-31 19:20:18 +00:00
Tatiana Bradley 1a1bb5a2f1 data/reports: add vulnerable_at to GO-2021-0412.yaml
Aliases: CVE-2022-24778, GHSA-8v99-48m9-c8pm

Updates golang/vulndb#412

Change-Id: I2bcb4d456b3cffec1439d117221391e1f63e1035
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/463681
Run-TryBot: Tatiana Bradley <tatianabradley@google.com>
Auto-Submit: Tatiana Bradley <tatianabradley@google.com>
Reviewed-by: Tim King <taking@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
2023-01-31 19:20:11 +00:00
Tatiana Bradley 9c48f25872 data/reports: fix GO-2021-0228.yaml
Add vulnerable_at and missing affected package

Aliases: CVE-2020-7664, GHSA-vpx7-vm66-qx8r

Updates golang/vulndb#228

Change-Id: I768700d8f98d738f05119a1ad2dceb9c301b0ea1
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/463680
TryBot-Result: Gopher Robot <gobot@golang.org>
Auto-Submit: Tatiana Bradley <tatianabradley@google.com>
Run-TryBot: Tatiana Bradley <tatianabradley@google.com>
Reviewed-by: Tim King <taking@google.com>
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
2023-01-31 19:20:06 +00:00
Tatiana Bradley b83913cf72 data/reports: add vulnerable_at for GO-2022-0433 and GO-2022-0434
Change-Id: Icea2d1b82309992a3e70073e05347f36860bbaac
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/463679
Reviewed-by: Tim King <taking@google.com>
Auto-Submit: Tatiana Bradley <tatianabradley@google.com>
Run-TryBot: Tatiana Bradley <tatianabradley@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
2023-01-31 19:20:00 +00:00
Tim King 1a27ba156b go.mod: updating go.mod
Adding the updates for go.mod that `gotip test ./...` currently do.

Change-Id: I948048dfd679b81ae50d04dd508d36291e09dfe5
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/464195
Run-TryBot: Tim King <taking@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Damien Neil <dneil@google.com>
2023-01-31 18:09:03 +00:00
Tim King 1adc0c4d16 vulnreport: skip report symbols on std lib
Skip checkReportSymbols if some symbol is in a standard library
at a different Go version than the current runtime. Prevents
vulnreport fix from deleting symbols due to using a newer go
version.

Change-Id: I8be06da38408cba80a201b8724e73a5c3f5ca470
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/463499
TryBot-Result: Gopher Robot <gobot@golang.org>
Run-TryBot: Tim King <taking@google.com>
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
2023-01-30 19:16:58 +00:00
Tatiana Bradley b414c4d4ff data/reports: add vulnerable_at to GO-2021-0238.yaml
Aliases: CVE-2021-33194

Updates golang/vulndb#238

Change-Id: I63ad9814791f782d90c2f1e0fad0df235e68456a
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/463677
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
Run-TryBot: Tatiana Bradley <tatianabradley@google.com>
Auto-Submit: Tatiana Bradley <tatianabradley@google.com>
Reviewed-by: Tim King <taking@google.com>
2023-01-30 17:43:37 +00:00
Tatiana Bradley b1e824a89e data/reports: add vulnerable_at to GO-2021-0237.yaml
Aliases: CVE-2021-32721, GHSA-mj9r-wwm8-7q52

Updates golang/vulndb#237

Change-Id: I964cb407244c5b7b41b369400ff5ef0b15e32f7f
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/463676
TryBot-Result: Gopher Robot <gobot@golang.org>
Run-TryBot: Tatiana Bradley <tatianabradley@google.com>
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
Reviewed-by: Tim King <taking@google.com>
Auto-Submit: Tatiana Bradley <tatianabradley@google.com>
2023-01-30 17:40:55 +00:00
Tim King a697eb6fae data/reports: apply vulnreport fix to 1187, 1201, 1213
Change-Id: Iff1f384ec351ee17e835f55118e0e1b945e26302
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/463114
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
Run-TryBot: Tim King <taking@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
2023-01-30 16:20:24 +00:00
Tim King e2604b9ce8 data/reports: apply vulnreport fix to 0969
Change-Id: I77763e5c6ac5a8d9e2199a65068fae8e2d0c8ee5
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/463113
Run-TryBot: Tim King <taking@google.com>
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
2023-01-30 16:20:19 +00:00
Tim King 135e1ab04d data/reports: apply vulnreport fix to 1117, 1118, 1130, 1155, 1165, and 1166
Change-Id: I3dd3f463ba0f42e56d85cce7fb545ebc70294fef
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/463112
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
Run-TryBot: Tim King <taking@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
2023-01-30 16:20:14 +00:00
Tim King 7253c1fd2a data/reports: run vulncheck fix on 0009, 0019, and 1083.
Change-Id: Ic5448c39a22b488eba8d306b1021b1d1f9cb25db
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/463111
Run-TryBot: Tim King <taking@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
2023-01-30 16:20:07 +00:00
Tim King a0624c70de data/reports: apply vulnreport fix to 0380 and 0384
Change-Id: Ifffda89da2ac3d170e9ff21931a90bb837427605
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/463109
Run-TryBot: Tim King <taking@google.com>
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
2023-01-30 16:20:01 +00:00
Tim King 01a6ab5ffb data/reports: apply vulnreport fix to 1027
Change-Id: Ibc88ba493a4dab08b30fcf98cfcb5c2f0531cdfb
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/463110
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
Run-TryBot: Tim King <taking@google.com>
2023-01-30 16:19:51 +00:00
Oleksandr Redko ac4f51fe65 internal/worker: remove unused module_proxy.go
Follows [internal/worker: remove scan-modules code](https://go-review.googlesource.com/c/vulndb/+/459836).

Change-Id: I2e25e083b7b2b4d3128146b533d88796b83828ea
GitHub-Last-Rev: c6b5b29f48
GitHub-Pull-Request: golang/vulndb#1510
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/463102
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Damien Neil <dneil@google.com>
Auto-Submit: Tatiana Bradley <tatianabradley@google.com>
Run-TryBot: Tatiana Bradley <tatianabradley@google.com>
2023-01-25 22:31:12 +00:00
Tatiana Bradley 21d453b184 data/reports: add vulnerable_at to GO-2021-0083.yaml
Aliases: CVE-2019-12496

Updates golang/vulndb#83

Change-Id: I37939aee2d68b200f4d9641f63517f782b5469a3
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/462776
TryBot-Result: Gopher Robot <gobot@golang.org>
Run-TryBot: Tatiana Bradley <tatianabradley@google.com>
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
Reviewed-by: Damien Neil <dneil@google.com>
Auto-Submit: Tatiana Bradley <tatianabradley@google.com>
2023-01-25 22:31:11 +00:00
Tatiana Bradley 2bbd554692 data/reports: add vulnerable_at for GO-2021-0081.yaml
Aliases: CVE-2019-10214, GHSA-85p9-j7c9-v4gr

Updates golang/vulndb#81

Change-Id: If55281df99825e2698ae3ed1f49dc500f22999f3
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/462775
TryBot-Result: Gopher Robot <gobot@golang.org>
Auto-Submit: Tatiana Bradley <tatianabradley@google.com>
Run-TryBot: Tatiana Bradley <tatianabradley@google.com>
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
Reviewed-by: Damien Neil <dneil@google.com>
2023-01-25 22:31:09 +00:00
Tatiana Bradley 7d8b5f3fe8 data/reports: batch add vulnerable_at
Change-Id: Id7e733dd37ca9462d6001d7db510cfdf7e0cc80b
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/462716
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Damien Neil <dneil@google.com>
Auto-Submit: Tatiana Bradley <tatianabradley@google.com>
Run-TryBot: Tatiana Bradley <tatianabradley@google.com>
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
2023-01-25 22:31:08 +00:00
Tatiana Bradley baa84c3bee data/reports: fix symbol in GO-2021-0075.yaml
Aliases: CVE-2018-12018

Updates golang/vulndb#75

Change-Id: I27f2aa6acc633b17019466e8eb037106fe522448
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/462715
Reviewed-by: Damien Neil <dneil@google.com>
Auto-Submit: Tatiana Bradley <tatianabradley@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
Run-TryBot: Tatiana Bradley <tatianabradley@google.com>
2023-01-25 22:31:07 +00:00
Oleksandr Redko 4d8402125c internal/database: replace os.MkdirTemp with T.TempDir
Updates [#45402](https://go.dev/issue/45402).

Change-Id: I7e14a6923af21fd5ce4979c648734155a3468558
GitHub-Last-Rev: 81004b22c5
GitHub-Pull-Request: golang/vulndb#1508
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/463098
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Run-TryBot: Tim King <taking@google.com>
Reviewed-by: Tim King <taking@google.com>
2023-01-24 16:03:49 +00:00
Zvonimir Pavlinovic 0f90384bc1 all: pull the most recent version of vuln
Also update some reports that are affected due to the recent changes to
vuln.

Change-Id: Ib59498928930615ad328d1135407d1fa581d0cad
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/462735
Reviewed-by: Tatiana Bradley <tatiana@golang.org>
Run-TryBot: Zvonimir Pavlinovic <zpavlinovic@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
2023-01-19 16:55:28 +00:00
Tatiana Bradley 768c201e6d data/reports: add vulnerable_at to GO-2021-0078.yaml
Aliases: CVE-2018-17075

Updates golang/vulndb#78

Change-Id: I9ebe78fc9cb8e9ab29251d6e915a9503e7d3cac2
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/462621
Auto-Submit: Tatiana Bradley <tatiana@golang.org>
Run-TryBot: Tatiana Bradley <tatiana@golang.org>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Damien Neil <dneil@google.com>
Reviewed-by: Tatiana Bradley <tatiana@golang.org>
2023-01-19 16:25:42 +00:00
Tatiana Bradley 632cc58464 data/reports: fix GO-2021-0076.yaml
Add vulnerable_at and incompatible versions

Aliases: CVE-2018-14632

Updates golang/vulndb#76

Change-Id: I30d6ba338b1560080b374fc3c8062fa2ff7bf275
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/462620
Reviewed-by: Tatiana Bradley <tatiana@golang.org>
Reviewed-by: Damien Neil <dneil@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Run-TryBot: Tatiana Bradley <tatiana@golang.org>
Auto-Submit: Tatiana Bradley <tatiana@golang.org>
2023-01-18 21:23:48 +00:00