Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: 23c154f0 by Salvatore Bonaccorso at 2019-03-29T07:44:13Z Add CVE-2019-1002101/kubernetes - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1,3 +1,7 @@ +CVE-2019-1002101 [Mishandling of symlinks allows for arbitrary file write via `kubectl cp`] + - kubernetes <not-affected> (Vulnerable code introduced later) + NOTE: Introduced by: https://github.com/kubernetes/kubernetes/commit/b1f85e2dfec6e64d8e1bc272251277df0058ab20 + NOTE: Upstream patch: https://github.com/kubernetes/kubernetes/pull/75037 CVE-2019-10261 RESERVED CVE-2019-10260 (Total.js CMS 12.0.0 has XSS related to themes/admin/views/index.html ( ...) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/23c154f0bf1ffe74cbb3a2937948ebc971a3e923 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/23c154f0bf1ffe74cbb3a2937948ebc971a3e923 You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
