[Git][security-tracker-team/security-tracker][master] CVE-2019-19921: Directly reference the commit
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Fri Feb 17 20:19:20 GMT 2023
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
8965c3d1 by Salvatore Bonaccorso at 2023-02-17T21:18:15+01:00
CVE-2019-19921: Directly reference the commit
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -234887,7 +234887,7 @@ CVE-2019-19921 (runc through 1.0.0-rc9 has Incorrect Access Control leading to E
[stretch] - runc <no-dsa> (Minor issue)
NOTE: https://github.com/opencontainers/runc/issues/2197
NOTE: https://github.com/opencontainers/runc/pull/2190
- NOTE: https://github.com/opencontainers/runc/commit/2fc03cc11c775b7a8b2e48d7ee447cb9bef32ad0 (v1.0.0-rc10)
+ NOTE: https://github.com/opencontainers/runc/commit/3291d66b98445bd7f7d02eac7f2bca2ac2c56942 (v1.0.0-rc10)
CVE-2019-19919 (Versions of handlebars prior to 4.3.0 are vulnerable to Prototype Poll ...)
- node-handlebars 3:4.5.3-1
[buster] - node-handlebars 3:4.1.0-1+deb10u1
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8965c3d1bb1988235c5bfb226dc89bcc8c74052e
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8965c3d1bb1988235c5bfb226dc89bcc8c74052e
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230217/ebcbc384/attachment.htm>
More information about the debian-security-tracker-commits
mailing list