[Git][security-tracker-team/security-tracker][master] k8s fixed

[Moritz Muehlenhoff]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f121ef29 by Moritz Muehlenhoff at 2020-12-09T15:19:29+01:00
k8s fixed
NFus

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -613,9 +613,9 @@ CVE-2020-29604
 CVE-2020-29603
 	RESERVED
 CVE-2020-29602 (The official irssi docker images before 1.1-alpine (Alpine specific) c ...)
-	TODO: check
+	NOT-FOR-US: irssi Docker images
 CVE-2020-29601 (The official notary docker images before signer-0.6.1-1 contain a blan ...)
-	TODO: check
+	NOT-FOR-US: notary Docker images
 CVE-2020-29600 (In AWStats through 7.7, cgi-bin/awstats.pl?config= accepts an absolute ...)
 	- awstats <unfixed> (bug #891469)
 	NOTE: https://github.com/eldy/awstats/issues/90
@@ -657,19 +657,19 @@ CVE-2020-29583
 CVE-2020-29582
 	RESERVED
 CVE-2020-29581 (The official spiped docker images before 1.5-alpine contain a blank pa ...)
-	TODO: check
+	NOT-FOR-US: spiped Docker images
 CVE-2020-29580 (The official storm Docker images before 1.2.1 contain a blank password ...)
-	TODO: check
+	NOT-FOR-US: storm Docker images
 CVE-2020-29579 (The official Express Gateway Docker images before 1.14.0 contain a bla ...)
-	TODO: check
+	NOT-FOR-US: Express Gateway Docker images
 CVE-2020-29578 (The official piwik Docker images before fpm-alpine (Alpine specific) c ...)
-	TODO: check
+	NOT-FOR-US: piwik Docker images
 CVE-2020-29577 (The official znc docker images before 1.7.1-slim contain a blank passw ...)
-	TODO: check
+	NOT-FOR-US: znc Docker images
 CVE-2020-29576 (The official eggdrop Docker images before 1.8.4rc2 contain a blank pas ...)
-	TODO: check
+	NOT-FOR-US: eggdrop Docker images
 CVE-2020-29575 (The official elixir Docker images before 1.8.0-alpine (Alpine specific ...)
-	TODO: check
+	NOT-FOR-US: elixir Docker images
 CVE-2020-29574
 	RESERVED
 CVE-2020-29573 (sysdeps/i386/ldbl2mpn.c in the GNU C Library (aka glibc or libc6) befo ...)
@@ -700,7 +700,7 @@ CVE-2020-29565 (An issue was discovered in OpenStack Horizon before 15.3.2, 16.x
 	NOTE: https://review.opendev.org/c/openstack/horizon/+/758843/
 	NOTE: https://opendev.org/openstack/horizon/commit/252467100f75587e18df9c43ed5802ee8f0017fa
 CVE-2020-29564 (The official Consul Docker images 0.7.1 through 1.4.2 contain a blank  ...)
-	TODO: check
+	NOT-FOR-US: Consul Docker images
 CVE-2020-29563
 	RESERVED
 CVE-2020-29562 (The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2 ...)
@@ -7076,7 +7076,7 @@ CVE-2020-27952
 CVE-2020-27951
 	RESERVED
 CVE-2020-27950 (A memory initialization issue was addressed. This issue is fixed in ma ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2020-27949
 	RESERVED
 CVE-2020-27948
@@ -7112,7 +7112,7 @@ CVE-2020-27934
 CVE-2020-27933
 	RESERVED
 CVE-2020-27932 (A type confusion issue was addressed with improved state handling. Thi ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2020-27931
 	RESERVED
 CVE-2020-27930 (A memory corruption issue was addressed with improved input validation ...)
@@ -54023,7 +54023,7 @@ CVE-2020-8566 (In Kubernetes clusters using Ceph RBD as a storage provisioner, w
 	NOTE: https://groups.google.com/g/kubernetes-announce/c/ScdmyORnPDk
 	NOTE: https://github.com/kubernetes/kubernetes/issues/95624
 CVE-2020-8565 (In Kubernetes, if the logging level is set to at least 9, authorizatio ...)
-	- kubernetes <unfixed> (bug #972649)
+	- kubernetes 1.20.0-1 (bug #972649)
 	NOTE: https://github.com/kubernetes/kubernetes/pull/95316
 	NOTE: https://groups.google.com/g/kubernetes-announce/c/ScdmyORnPDk
 	NOTE: https://github.com/kubernetes/kubernetes/issues/95623



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f121ef29bac6eeef5dfc95a2878b4bd9501bde24

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f121ef29bac6eeef5dfc95a2878b4bd9501bde24
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20201209/2beb3ac0/attachment.html>