[Git][security-tracker-team/security-tracker][master] new golang-github-containers-image issue

[Moritz Muehlenhoff]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
528b96ed by Moritz Muehlenhoff at 2019-10-23T13:13:34Z
new golang-github-containers-image issue
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -23499,38 +23499,55 @@ CVE-2019-10476
 	RESERVED
 CVE-2019-10475
 	RESERVED
+	NOT-FOR-US: Jenkins plugin
 CVE-2019-10474
 	RESERVED
+	NOT-FOR-US: Jenkins plugin
 CVE-2019-10473
 	RESERVED
+	NOT-FOR-US: Jenkins plugin
 CVE-2019-10472
 	RESERVED
+	NOT-FOR-US: Jenkins plugin
 CVE-2019-10471
 	RESERVED
+	NOT-FOR-US: Jenkins plugin
 CVE-2019-10470
 	RESERVED
+	NOT-FOR-US: Jenkins plugin
 CVE-2019-10469
 	RESERVED
+	NOT-FOR-US: Jenkins plugin
 CVE-2019-10468
 	RESERVED
+	NOT-FOR-US: Jenkins plugin
 CVE-2019-10467
 	RESERVED
+	NOT-FOR-US: Jenkins plugin
 CVE-2019-10466
 	RESERVED
+	NOT-FOR-US: Jenkins plugin
 CVE-2019-10465
 	RESERVED
+	NOT-FOR-US: Jenkins plugin
 CVE-2019-10464
 	RESERVED
+	NOT-FOR-US: Jenkins plugin
 CVE-2019-10463
 	RESERVED
+	NOT-FOR-US: Jenkins plugin
 CVE-2019-10462
 	RESERVED
+	NOT-FOR-US: Jenkins plugin
 CVE-2019-10461
 	RESERVED
+	NOT-FOR-US: Jenkins plugin
 CVE-2019-10460
 	RESERVED
+	NOT-FOR-US: Jenkins plugin
 CVE-2019-10459
 	RESERVED
+	NOT-FOR-US: Jenkins plugin
 CVE-2019-10458 (Jenkins Puppet Enterprise Pipeline 1.3.1 and earlier specifies unsafe  ...)
 	NOT-FOR-US: Jenkins plugin
 CVE-2019-10457 (A missing permission check in Jenkins Oracle Cloud Infrastructure Comp ...)
@@ -24124,7 +24141,10 @@ CVE-2019-10215 (Bootstrap-3-Typeahead after version 4.0.2 is vulnerable to a cro
 	NOT-FOR-US: Bootstrap-3-Typeahead
 CVE-2019-10214
 	RESERVED
-	TODO: check, issue is in containers library, which is at least embedded in src:singularity-container
+	- golang-github-containers-image <not-affected> (Vulnerable version was never in unstable)
+	- singularity-container <unfixed>
+	NOTE: https://github.com/containers/image/issues/654
+	NOTE: https://github.com/containers/image/pull/669
 CVE-2019-10213
 	RESERVED
 	NOT-FOR-US: OpenShift



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/528b96ed22c7e208363364c0829de48e340fac2e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/528b96ed22c7e208363364c0829de48e340fac2e
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191023/92d78798/attachment.html>