data: update reports for OSV schema changes
Change-Id: I381c0225514627719d103395580f3b2d8d8efc2d
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/424899
Reviewed-by: Julie Qiu <julieqiu@google.com>
diff --git a/data/reports/GO-2020-0012.yaml b/data/reports/GO-2020-0012.yaml
index e4f38d4..769a614 100644
--- a/data/reports/GO-2020-0012.yaml
+++ b/data/reports/GO-2020-0012.yaml
@@ -1,14 +1,15 @@
-packages:
+modules:
- module: golang.org/x/crypto
- package: golang.org/x/crypto/ssh
- symbols:
- - parseED25519
- - ed25519PublicKey.Verify
- - parseSKEd25519
- - skEd25519PublicKey.Verify
- - NewPublicKey
versions:
- fixed: 0.0.0-20200220183623-bac4c82f6975
+ packages:
+ - package: golang.org/x/crypto/ssh
+ symbols:
+ - parseED25519
+ - ed25519PublicKey.Verify
+ - parseSKEd25519
+ - skEd25519PublicKey.Verify
+ - NewPublicKey
description: |
An attacker can craft an ssh-ed25519 or sk-ssh-ed25519@openssh.com public
key, such that the library will panic when trying to verify a signature