x/vulndb: suggestion regarding GO-2024-2527

[rikatz]

Report ID

GO-2024-2527

Suggestion/Comment

This report is not about a vulnerability, but on a configuration state.

For instance, the mentioned advisory at GHSA-5x4g-q5rc-36jp reports that the correction is to set the right cipher suite.

Govulncheck is detecting it on a version that, per this report is supposed to be fixed:

Vulnerability #1: GO-2024-2527
    Etcd pkg Insecure ciphers are allowed by default in
    go.etcd.io/etcd/client/pkg/v3
  More info: https://pkg.go.dev/vuln/GO-2024-2527
  Module: go.etcd.io/etcd/client/pkg/v3
    Found in: go.etcd.io/etcd/client/pkg/v3@v3.5.10

Thanks!!

[rikatz]

Oooops just saw @dims being faster than me on #2952
Closing and will follow from this other report.

Thanks