github/linuxkit
1
0
Fork 0
mirror of https://github.com/linuxkit/linuxkit.git synced 2025-07-20 09:39:08 +00:00
Code Issues Projects Releases Wiki Activity

Merge pull request #1445 from tych0/security-non-events

Browse Source 
docs: add a security-events.md
This commit is contained in:
Justin Cormack 2017-04-02 12:17:20 +01:00 committed by GitHub
commit 8513d3a995
1 changed files with 13 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
docs/security-events.md Normal file
View File

@ -0,0 +1,13 @@
# Moby Security Events
The incomplete list below is an assessment of some CVEs, and Moby's resilience
(or not) to them.
### Bugs mitigated:
* [CVE-2017-2636](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2636)
([exploit post](https://a13xp0p0v.github.io/2017/03/24/CVE-2017-2636.html)):
This CVE requires `CONFIG_N_HDLC={y|m}`, which Moby does not specify, and so
is not vulnerable.
### Bugs not mitigated: