Go/github.com/containers/image CVE-2019-10214: medium 6.4, EPSS 1.59%

containers/image library Insufficiently Protects Credentials

Action: Upgrade github.com/containers/image to 3.0.0 or later.

go get github.com/containers/image@v3.0.0

Affected

Fixed versions

Sources

• osv: GHSA-85p9-j7c9-v4gr
• https://nvd.nist.gov/vuln/detail/CVE-2019-10214
• https://github.com/containers/image/issues/654
• https://github.com/containers/image/pull/655
• https://github.com/containers/image/pull/669
• https://github.com/containers/image/commit/634605d06e738aec8332bcfd69162e7509ac7aaf
• https://bugzilla.redhat.com/show_bug.cgi?id=1732508
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10214
• https://github.com/containers/image
• https://pkg.go.dev/vuln/GO-2021-0081
• http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00035.html
• http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html

CVE-2019-10214 · published 2022-02-15T01:57:18Z · modified 2024-05-20T19:46:40Z · JSON