commit 7bffffae38579a5c2883dfd7e453d8bf602157da
author Tatiana Bradley <tatianabradley@google.com> Wed Jan 18 11:51:01 2023 -0500
committer Gopher Robot <gobot@golang.org> Wed Jan 18 21:23:45 2023 +0000
tree 6be12dd903af86bbaec558cd1202ee61136706b9
parent a609ca0adfc5106f9681f8c788491d267159d05a

data/reports: add vulnerable_at to GO-2021-0072.yaml

Aliases: CVE-2017-11468

Updates golang/vulndb#72

Change-Id: Ic6af2139bad830d6c359aa5125418b4bffff6009
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/462618
Run-TryBot: Tatiana Bradley <tatiana@golang.org>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Tatiana Bradley <tatiana@golang.org>
Reviewed-by: Damien Neil <dneil@google.com>
Auto-Submit: Tatiana Bradley <tatiana@golang.org>

data/osv/GO-2021-0072.json

diff --git a/data/osv/GO-2021-0072.json b/data/osv/GO-2021-0072.json
index 097924a..22c0afa 100644
--- a/data/osv/GO-2021-0072.json
+++ b/data/osv/GO-2021-0072.json
@@ -47,7 +47,6 @@
               "Walk",
               "blobStore.Enumerate",
               "blobStore.Get",
-              "blobStore.Get",
               "linkedBlobStore.Enumerate",
               "linkedBlobStore.Get",
               "manifestStore.Enumerate",

data/reports/GO-2021-0072.yaml

diff --git a/data/reports/GO-2021-0072.yaml b/data/reports/GO-2021-0072.yaml
index 01ce67b..1f23edd 100644
--- a/data/reports/GO-2021-0072.yaml
+++ b/data/reports/GO-2021-0072.yaml
@@ -2,6 +2,7 @@
   - module: github.com/docker/distribution
     versions:
       - fixed: 2.7.0-rc.0+incompatible
+    vulnerable_at: 2.6.2+incompatible
     packages:
       - package: github.com/docker/distribution/registry/handlers
         symbols:
@@ -18,7 +19,6 @@
           - PurgeUploads
           - Walk
           - blobStore.Enumerate
-          - blobStore.Get
           - linkedBlobStore.Enumerate
           - linkedBlobStore.Get
           - manifestStore.Enumerate