[Git][security-tracker-team/security-tracker][master] new golang-github-containers-image issue
Moritz Muehlenhoff
jmm at debian.org
Wed Oct 23 14:13:56 BST 2019
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
528b96ed by Moritz Muehlenhoff at 2019-10-23T13:13:34Z
new golang-github-containers-image issue
NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -23499,38 +23499,55 @@ CVE-2019-10476
RESERVED
CVE-2019-10475
RESERVED
+ NOT-FOR-US: Jenkins plugin
CVE-2019-10474
RESERVED
+ NOT-FOR-US: Jenkins plugin
CVE-2019-10473
RESERVED
+ NOT-FOR-US: Jenkins plugin
CVE-2019-10472
RESERVED
+ NOT-FOR-US: Jenkins plugin
CVE-2019-10471
RESERVED
+ NOT-FOR-US: Jenkins plugin
CVE-2019-10470
RESERVED
+ NOT-FOR-US: Jenkins plugin
CVE-2019-10469
RESERVED
+ NOT-FOR-US: Jenkins plugin
CVE-2019-10468
RESERVED
+ NOT-FOR-US: Jenkins plugin
CVE-2019-10467
RESERVED
+ NOT-FOR-US: Jenkins plugin
CVE-2019-10466
RESERVED
+ NOT-FOR-US: Jenkins plugin
CVE-2019-10465
RESERVED
+ NOT-FOR-US: Jenkins plugin
CVE-2019-10464
RESERVED
+ NOT-FOR-US: Jenkins plugin
CVE-2019-10463
RESERVED
+ NOT-FOR-US: Jenkins plugin
CVE-2019-10462
RESERVED
+ NOT-FOR-US: Jenkins plugin
CVE-2019-10461
RESERVED
+ NOT-FOR-US: Jenkins plugin
CVE-2019-10460
RESERVED
+ NOT-FOR-US: Jenkins plugin
CVE-2019-10459
RESERVED
+ NOT-FOR-US: Jenkins plugin
CVE-2019-10458 (Jenkins Puppet Enterprise Pipeline 1.3.1 and earlier specifies unsafe ...)
NOT-FOR-US: Jenkins plugin
CVE-2019-10457 (A missing permission check in Jenkins Oracle Cloud Infrastructure Comp ...)
@@ -24124,7 +24141,10 @@ CVE-2019-10215 (Bootstrap-3-Typeahead after version 4.0.2 is vulnerable to a cro
NOT-FOR-US: Bootstrap-3-Typeahead
CVE-2019-10214
RESERVED
- TODO: check, issue is in containers library, which is at least embedded in src:singularity-container
+ - golang-github-containers-image <not-affected> (Vulnerable version was never in unstable)
+ - singularity-container <unfixed>
+ NOTE: https://github.com/containers/image/issues/654
+ NOTE: https://github.com/containers/image/pull/669
CVE-2019-10213
RESERVED
NOT-FOR-US: OpenShift
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/528b96ed22c7e208363364c0829de48e340fac2e
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/528b96ed22c7e208363364c0829de48e340fac2e
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191023/92d78798/attachment.html>
More information about the debian-security-tracker-commits
mailing list