add some headings, fix some spelling mistakes

Signed-off-by: Tycho Andersen <tycho@docker.com>
This commit is contained in:
Tycho Andersen 2017-03-31 13:05:01 -06:00
parent ad7ddba0dc
commit 12624b60bf

View File

@ -1,9 +1,13 @@
The incomplete list below is an assement of some CVEs, and Moby's resillience
to them.
# Moby Security Events
Bugs mitigated:
The incomplete list below is an assessment of some CVEs, and Moby's resilience
(or not) to them.
### Bugs mitigated:
* [CVE-2017-2636](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2636)
([exploit post](https://a13xp0p0v.github.io/2017/03/24/CVE-2017-2636.html)):
This CVE requires `CONFIG_N_HDLC={y|m}`, which Moby does not specify, and so
is not vulnerable.
### Bugs not mitigated: