[Git][security-tracker-team/security-tracker][master] Update status for three older libpod CVES
Salvatore Bonaccorso
carnil at debian.org
Sat May 16 05:45:29 BST 2020
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
5982c43d by Salvatore Bonaccorso at 2020-05-16T06:44:35+02:00
Update status for three older libpod CVES
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -34946,7 +34946,7 @@ CVE-2019-18468
CVE-2019-18467
REJECTED
CVE-2019-18466 (An issue was discovered in Podman in libpod before 1.6.0. It resolves ...)
- - libpod <unfixed>
+ - libpod <not-affected> (Fixed before initial upload)
CVE-2019-18601 (OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to denial of ser ...)
{DLA-1982-1}
- openafs 1.8.5-1 (low; bug #943587)
@@ -61163,7 +61163,7 @@ CVE-2019-10153 (A flaw was discovered in fence-agents, prior to version 4.3.4, w
NOTE: https://github.com/ClusterLabs/fence-agents/pull/255
NOTE: https://github.com/ClusterLabs/fence-agents/pull/272
CVE-2019-10152 (A path traversal vulnerability has been discovered in podman before ve ...)
- - libpod <unfixed>
+ - libpod <not-affected> (Fixed before initial upload)
CVE-2019-10151
RESERVED
CVE-2019-10150 (It was found that OpenShift Container Platform versions 3.6.x - 4.6.0 ...)
@@ -113314,7 +113314,7 @@ CVE-2018-10857 (git-annex is vulnerable to a private data exposure and exfiltrat
NOTE: http://www.openwall.com/lists/oss-security/2018/06/26/4
NOTE: https://git-annex.branchable.com/security/CVE-2018-10857_and_CVE-2018-10859/
CVE-2018-10856 (It has been discovered that podman before version 0.6.1 does not drop ...)
- - libpod <unfixed>
+ - libpod <not-affected> (Fixed before initial upload)
CVE-2018-10855 (Ansible 2.5 prior to 2.5.5, and 2.4 prior to 2.4.5, do not honor the n ...)
{DSA-4396-1}
- ansible 2.5.5+dfsg-1 (low)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5982c43d89941b472d437b71cc3b7a0da10b7671
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5982c43d89941b472d437b71cc3b7a0da10b7671
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200516/c34361f9/attachment-0001.html>
More information about the debian-security-tracker-commits
mailing list