Go/github.com/containers/storage CVE-2021-20291: medium 6.5, EPSS 1.59%
Improper Locking in github.com/containers/storage
Action: Upgrade github.com/containers/storage to 1.28.1 or later.
go get github.com/containers/storage@v1.28.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.28.1 | - |
Fixed versions
| 1.28.1 |
Sources
- osv: GHSA-7qw8-847f-pggm
- https://nvd.nist.gov/vuln/detail/CVE-2021-20291
- https://github.com/containers/storage/pull/860
- https://github.com/containers/storage/commit/306fcabc964470e4b3b87a43a8f6b7d698209ee1
- https://bugzilla.redhat.com/show_bug.cgi?id=1939485
- https://github.com/containers/storage
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R5D7XL7FL24TWFMGQ3K2S72EOUSLZMKL
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SPYOHNG2Q7DCAQZMGYLMENLKALGDLG3X
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WX24EITRXVHDM5M223BVTJA2ODF2FSHI
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZNMB7O2UIXE34PGSCSOULGHPX5LIJBMM
- https://pkg.go.dev/vuln/GO-2021-0100
- https://unit42.paloaltonetworks.com/cve-2021-20291
CVE-2021-20291 · published · modified · JSON