[Git][security-tracker-team/security-tracker][master] Update information on CVE-2017-14992/docker.io

Salvatore Bonaccorso carnil at debian.org
Mon Sep 10 07:19:19 BST 2018


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8b4a5292 by Salvatore Bonaccorso at 2018-09-10T06:18:37Z
Update information on CVE-2017-14992/docker.io

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -52528,13 +52528,15 @@ CVE-2017-14994 (ReadDCMImage in coders/dcm.c in GraphicsMagick 1.3.26 allows rem
 CVE-2017-14993 (OXID eShop Community Edition before 6.0.0 RC3 (development), 4.10.x ...)
 	NOT-FOR-US: OXID eShop Community Edition
 CVE-2017-14992 (Lack of content verification in Docker-CE (Also known as Moby) ...)
-	- docker.io <unfixed> (bug #908055)
+	- docker.io 18.03.1+dfsg1-2 (bug #908055)
 	- golang-github-vbatts-tar-split 0.10.2-1 (bug #908056)
 	[stretch] - golang-github-vbatts-tar-split <no-dsa> (Minor issue)
 	NOTE: Issue needs to be fixed in src:golang-github-vbatts-tar-split first
 	NOTE: https://github.com/vbatts/tar-split/issues/41
 	NOTE: docker.io needs then a rebuild with a fixed golang-github-vbatts-tar-split
 	NOTE: version.
+	NOTE: 17.12.1+dfsg-1 was the first upload (to experimental) using the fixed version
+	NOTE: golang-github-vbatts-tar-split.
 CVE-2017-14991 (The sg_ioctl function in drivers/scsi/sg.c in the Linux kernel before ...)
 	- linux 4.13.4-1
 	[stretch] - linux <not-affected> (Vulnerable code introduced later)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/8b4a5292a3d5e3238971d9b1a1c8c316e57081be

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/8b4a5292a3d5e3238971d9b1a1c8c316e57081be
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180910/2b550b74/attachment.html>


More information about the debian-security-tracker-commits mailing list