Sylvain Beucler pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
169276f8 by Sylvain Beucler at 2023-02-27T11:33:42+01:00
CVE-2019-19921/runc: possibly re-introduced by CVE-2021-30465 fix
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -238078,7 +238078,7 @@ CVE-2019-19921 (runc through 1.0.0-rc9 has Incorrect
Access Control leading to E
NOTE: https://github.com/opencontainers/runc/issues/2197
NOTE: https://github.com/opencontainers/runc/pull/2190
NOTE:
https://github.com/opencontainers/runc/commit/3291d66b98445bd7f7d02eac7f2bca2ac2c56942
(v1.0.0-rc10)
- NOTE: possibly partial fix only:
https://github.com/opencontainers/runc/issues/2197#issuecomment-1437276049
+ NOTE: possibly re-introduced with CVE-2021-30465 fix:
https://github.com/opencontainers/runc/issues/3751
CVE-2019-19919 (Versions of handlebars prior to 4.3.0 are vulnerable to
Prototype Poll ...)
- node-handlebars 3:4.5.3-1
[buster] - node-handlebars 3:4.1.0-1+deb10u1
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/169276f8bd14c64064f38404581a062ecbc7d88a
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/169276f8bd14c64064f38404581a062ecbc7d88a
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
