[Git][security-tracker-team/security-tracker][master] Add CVE-2019-1020014/golang-github-docker-docker-credential-helpers

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f113aa57 by Salvatore Bonaccorso at 2019-08-03T09:29:18Z
Add CVE-2019-1020014/golang-github-docker-docker-credential-helpers

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1223,7 +1223,8 @@ CVE-2019-1020016 (ASH-AIO before 2.0.0.3 allows an open redirect. ...)
 CVE-2019-1020015 (graphql-engine (aka Hasura GraphQL Engine) before 1.0.0-beta.3 mishand ...)
 	NOT-FOR-US: graphql-engine (aka Hasura GraphQL Engine)
 CVE-2019-1020014 (docker-credential-helpers before 0.6.3 has a double free in the List f ...)
-	TODO: check
+	- golang-github-docker-docker-credential-helpers <unfixed>
+	NOTE: https://github.com/docker/docker-credential-helpers/commit/1c9f7ede70a5ab9851f4c9cb37d317fd89cd318a
 CVE-2019-1020013 (parse-server before 3.6.0 allows account enumeration. ...)
 	TODO: check
 CVE-2019-1020012 (parse-server before 3.4.1 allows DoS after any POST to a volatile clas ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/f113aa57f99b146edd047455cf4ead986a69f121

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/f113aa57f99b146edd047455cf4ead986a69f121
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190803/b3c3237d/attachment.html>