[pkg-go] Bug#933801: golang-github-docker-docker-credential-helpers: CVE-2019-1020014

Salvatore Bonaccorso carnil at debian.org
Sat Aug 3 18:14:19 BST 2019


Source: golang-github-docker-docker-credential-helpers
Version: 0.6.1-2
Severity: important
Tags: security upstream

Hi,

The following vulnerability was published for
golang-github-docker-docker-credential-helpers.

CVE-2019-1020014[0]:
| docker-credential-helpers before 0.6.3 has a double free in the List
| functions.


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2019-1020014
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1020014

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore



More information about the Pkg-go-maintainers mailing list