[Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2021-4024/libpod via unstable
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Mon Dec 27 20:07:11 GMT 2021
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
50baac2a by Salvatore Bonaccorso at 2021-12-27T21:06:41+01:00
Add fixed version for CVE-2021-4024/libpod via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -4865,7 +4865,7 @@ CVE-2021-44228 (Apache Log4j2 2.0-beta9 through 2.12.1 and 2.13.0 through 2.15.0
NOTE: The lookup is performed *after* formatting the message, which includes the user input. Hence
NOTE: the vulnerability can still be triggered using a ParametrizedMessage.
CVE-2021-4024 (A flaw was found in podman. The `podman machine` function (used to cre ...)
- - libpod <unfixed> (bug #1000844)
+ - libpod 3.4.3+ds1-1 (bug #1000844)
[bullseye] - libpod <not-affected> (Vulnerable code introduced later)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2026675
NOTE: https://twitter.com/discordianfish/status/1463462371675066371
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/50baac2aedffa20451701de5cfceb2a1b5ec5c2c
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/50baac2aedffa20451701de5cfceb2a1b5ec5c2c
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20211227/98b4e632/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list