Hi there! How do you consider the impact of CVE-2020-29510 [1] on Mender? Do you think this is critical? We are asking since warrior-v2020.10 is directly affected with version 1.14.7. Best regards [1] NVD - CVE-2020-29510

Impact of CVE-2020-29510 on Mender

kacf February 1, 2021, 8:07am 3

Hello @deffo, neither the Mender Client nor Mender Connect uses encoding/xml anywhere, including in sub packages, so I believe they are not affected.

2 Likes

Impact of CVE-2021-27918 on Mender

Topic		Replies	Views
Impact of CVE-2021-27918 on Mender General Discussions yocto , warrior , security	1	553	March 22, 2021
Impact of CVE-2021-38297 on Mender General Discussions yocto , security , dunfell	1	364	October 26, 2021
Impact of CVE-2021-31525 and CVE-2021-33194 on Mender General Discussions security	2	344	July 2, 2021
Impact of CVE-2021-3114 and CVE-2021-3115 on Mender General Discussions	3	416	February 5, 2021
Impact of certain CVEs on Mender General Discussions yocto , security , dunfell	2	372	August 16, 2021

Impact of CVE-2020-29510 on Mender

Related Topics