[Git][security-tracker-team/security-tracker][master] CVE-2019-19921/runc: possibly re-introduced by CVE-2021-30465 fix

[Sylvain Beucler (@beuc)]

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker


Commits:
169276f8 by Sylvain Beucler at 2023-02-27T11:33:42+01:00
CVE-2019-19921/runc: possibly re-introduced by CVE-2021-30465 fix

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -238078,7 +238078,7 @@ CVE-2019-19921 (runc through 1.0.0-rc9 has Incorrect Access Control leading to E
 	NOTE: https://github.com/opencontainers/runc/issues/2197
 	NOTE: https://github.com/opencontainers/runc/pull/2190
 	NOTE: https://github.com/opencontainers/runc/commit/3291d66b98445bd7f7d02eac7f2bca2ac2c56942 (v1.0.0-rc10)
-	NOTE: possibly partial fix only: https://github.com/opencontainers/runc/issues/2197#issuecomment-1437276049
+	NOTE: possibly re-introduced with CVE-2021-30465 fix: https://github.com/opencontainers/runc/issues/3751
 CVE-2019-19919 (Versions of handlebars prior to 4.3.0 are vulnerable to Prototype Poll ...)
 	- node-handlebars 3:4.5.3-1
 	[buster] - node-handlebars 3:4.1.0-1+deb10u1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/169276f8bd14c64064f38404581a062ecbc7d88a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/169276f8bd14c64064f38404581a062ecbc7d88a
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230227/590d6446/attachment.htm>