[pkg-go] Bug#840711: golang-github-appc-docker2aci: CVE-2016-8579
Salvatore Bonaccorso
carnil at debian.org
Fri Oct 14 05:35:11 UTC 2016
Source: golang-github-appc-docker2aci
Version: 0.12.0+dfsg-1
Severity: grave
Tags: security upstream patch
Forwarded: https://github.com/appc/docker2aci/issues/203
Hi,
the following vulnerability was published for golang-github-appc-docker2aci.
CVE-2016-8579[0]:
infinite loop in deps walking
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
[0] https://security-tracker.debian.org/tracker/CVE-2016-8579
[1] https://github.com/appc/docker2aci/issues/203
[2] https://github.com/lucab/docker2aci/commit/54331ec7020e102935c31096f336d31f6400064f
Regards,
Salvatore
More information about the Pkg-go-maintainers
mailing list