Skip to content
GitLab
Explore
Sign in
Register
Commits on Source (3)
Mark CVE-2019-1020014 as no-dsa
· c07819dc
Salvatore Bonaccorso
authored
Aug 08, 2019
c07819dc
Track proposed fix for golang-github-docker-docker-credential-helpers via buster-pu
· f66fd08e
Salvatore Bonaccorso
authored
Aug 08, 2019
f66fd08e
Merge branch 'golang-github-docker-docker-credential-helpers-buster-pu'
· 68154f71
Salvatore Bonaccorso
authored
Aug 08, 2019
68154f71
Hide whitespace changes
Inline
Side-by-side
data/CVE/list
View file @
68154f71
...
...
@@ -1803,6 +1803,7 @@ CVE-2019-1020015 (graphql-engine (aka Hasura GraphQL Engine) before 1.0.0-beta.3
NOT-FOR-US: graphql-engine (aka Hasura GraphQL Engine)
CVE-2019-1020014 (docker-credential-helpers before 0.6.3 has a double free in the List f ...)
- golang-github-docker-docker-credential-helpers 0.6.1-3 (bug #933801)
[buster] - golang-github-docker-docker-credential-helpers <no-dsa> (Minor issue, can be fixed in point release)
NOTE: https://github.com/docker/docker-credential-helpers/commit/1c9f7ede70a5ab9851f4c9cb37d317fd89cd318a
CVE-2019-1020013 (parse-server before 3.6.0 allows account enumeration. ...)
TODO: check
data/next-point-update.txt
View file @
68154f71
...
...
@@ -40,3 +40,5 @@ CVE-2019-14267
[buster] - pdfresurrect 0.15-2+deb10u1
CVE-2019-XXXX [clamav zip DoS]
[buster] - clamav 0.101.2+dfsg-1+deb10u1
CVE-2019-1020014
[buster] - golang-github-docker-docker-credential-helpers 0.6.1-2+deb10u1