smtp.PlainAuth susceptible to man-in-the-middle password harvesting [Go 1.9]

[broady]

See #22134 for details.

Fixed in Go 1.9.1 by CL 68210 (39dd6f614474).

[ddillard]

Is there going to be a CVE for this issue? If not, any objections to me getting one assigned?

[KilledKenny]

@ddillard See the linked issue #22134 CVE-2017-15042

[ddillard]

Excellent. Thank you.