[pkg-go] Bug#840711: golang-github-appc-docker2aci: CVE-2016-8579

Salvatore Bonaccorso carnil at debian.org
Fri Oct 14 05:35:11 UTC 2016


Source: golang-github-appc-docker2aci
Version: 0.12.0+dfsg-1
Severity: grave
Tags: security upstream patch
Forwarded: https://github.com/appc/docker2aci/issues/203

Hi,

the following vulnerability was published for golang-github-appc-docker2aci.

CVE-2016-8579[0]:
infinite loop in deps walking

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2016-8579
[1] https://github.com/appc/docker2aci/issues/203
[2] https://github.com/lucab/docker2aci/commit/54331ec7020e102935c31096f336d31f6400064f

Regards,
Salvatore



More information about the Pkg-go-maintainers mailing list