commit a609ca0adfc5106f9681f8c788491d267159d05a
author Tatiana Bradley <tatianabradley@google.com> Wed Jan 18 11:35:44 2023 -0500
committer Gopher Robot <gobot@golang.org> Wed Jan 18 21:23:44 2023 +0000
tree 5387a9cb0427319074ccc3ca641a6f1d76d2f212
parent 52ed4388d29c82a43044f9f2d29bbaaa2d4612b5

data/reports: add vulnerable_at to GO-2021-0065.yaml

Aliases: CVE-2019-11250

Updates golang/vulndb#65

Change-Id: I0b3b58acec9cce8ab298d9be9f1982757e7f8d3b
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/462617
Reviewed-by: Tatiana Bradley <tatiana@golang.org>
TryBot-Result: Gopher Robot <gobot@golang.org>
Auto-Submit: Tatiana Bradley <tatiana@golang.org>
Run-TryBot: Tatiana Bradley <tatiana@golang.org>
Reviewed-by: Damien Neil <dneil@google.com>

data/osv/GO-2021-0065.json

diff --git a/data/osv/GO-2021-0065.json b/data/osv/GO-2021-0065.json
index 7b47619..1692396 100644
--- a/data/osv/GO-2021-0065.json
+++ b/data/osv/GO-2021-0065.json
@@ -33,7 +33,11 @@
           {
             "path": "k8s.io/client-go/transport",
             "symbols": [
-              "debuggingRoundTripper.RoundTrip"
+              "basicAuthRoundTripper.RoundTrip",
+              "bearerAuthRoundTripper.RoundTrip",
+              "debuggingRoundTripper.RoundTrip",
+              "impersonatingRoundTripper.RoundTrip",
+              "userAgentRoundTripper.RoundTrip"
             ]
           }
         ]

data/reports/GO-2021-0065.yaml

diff --git a/data/reports/GO-2021-0065.yaml b/data/reports/GO-2021-0065.yaml
index 7907e71..4448bb4 100644
--- a/data/reports/GO-2021-0065.yaml
+++ b/data/reports/GO-2021-0065.yaml
@@ -2,10 +2,16 @@
   - module: k8s.io/client-go
     versions:
       - fixed: 0.17.0
+    vulnerable_at: 0.16.16-rc.0
     packages:
       - package: k8s.io/client-go/transport
         symbols:
           - debuggingRoundTripper.RoundTrip
+        derived_symbols:
+          - basicAuthRoundTripper.RoundTrip
+          - bearerAuthRoundTripper.RoundTrip
+          - impersonatingRoundTripper.RoundTrip
+          - userAgentRoundTripper.RoundTrip
   - module: k8s.io/kubernetes
     versions:
       - fixed: 1.16.0-beta.1