[pkg-go] Bug#933801: golang-github-docker-docker-credential-helpers: CVE-2019-1020014
Salvatore Bonaccorso
carnil at debian.org
Sat Aug 3 18:14:19 BST 2019
Source: golang-github-docker-docker-credential-helpers
Version: 0.6.1-2
Severity: important
Tags: security upstream
Hi,
The following vulnerability was published for
golang-github-docker-docker-credential-helpers.
CVE-2019-1020014[0]:
| docker-credential-helpers before 0.6.3 has a double free in the List
| functions.
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
[0] https://security-tracker.debian.org/tracker/CVE-2019-1020014
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1020014
Please adjust the affected versions in the BTS as needed.
Regards,
Salvatore
More information about the Pkg-go-maintainers
mailing list