CVE-2020-2026
1 advisory.
Go/github.com/kata-containers/runtime CVE-2020-2026: high 8.8
Link Following in Kata Runtime
Action: Upgrade github.com/kata-containers/runtime to 1.9.1 or later.
go get github.com/kata-containers/runtime@v1.9.1go get github.com/kata-containers/runtime@v1.10.6go get github.com/kata-containers/runtime@v1.11.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.9.1 | - |
| 1.10.0 | 1.10.6 | - |
| 1.11.0 | 1.11.1 | - |
Fixed versions
| 1.9.1 | 1.10.6 | 1.11.1 |
Sources
- osv: GHSA-877x-32pm-p28x
- https://nvd.nist.gov/vuln/detail/CVE-2020-2026
- https://github.com/kata-containers/runtime/issues/2712
- https://github.com/kata-containers/runtime/pull/2713
- https://github.com/kata-containers/runtime/releases/tag/1.10.5
- https://github.com/kata-containers/runtime/releases/tag/1.11.1
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2P7FHA4AF6Y6PAVJBTTQPUEHXZQUOF3P
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6JPBKAQBF3OR72N55GWM2TDYQP2OHK6H
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6W5MKF7HSAIL2AX2BX6RV4WWVGUIKVLS
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NJAMOVB7DSOGX7J26QH5HZKU7GSSX2VU
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QNJHSSPCKUGJDVXXIXK2JUWCRJDQX7CE
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XWACJQSMY5BVDMVTF3FBN7HZSOSFOG3Q
CVE-2020-2026 · published · modified · JSON