Skip to content

Commit 9cf93df

Browse files
authored
tink-worker mitigate CVE-2025-54410 (open-edge-platform#99)
resolution: moby-engine is not used instead containerd engine, hence CVE may not be reproduceable as current network setup is maintain by containerd in an isolated environment.
1 parent 261e958 commit 9cf93df

File tree

1 file changed

+7
-0
lines changed

1 file changed

+7
-0
lines changed

SPECS/tink-worker/.bdba.yaml

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,12 @@ overrides:
1313
files:
1414
- path: usr/bin/tink-worker
1515
vulnerabilityTriages:
16+
- component:
17+
name: moby
18+
triages:
19+
- cve: CVE-2025-54410
20+
resolution: FalsePositive
21+
comment: '"Containerd is used, not docker"'
1622
- component:
1723
name: containerd
1824
triages:
@@ -31,3 +37,4 @@ vulnerabilityTriages:
3137
- cve: CVE-2019-15544
3238
resolution: FalsePositive
3339
comment: "This CVE is linked to a Rust component, but this specific component doesn't use Rust, making it invalid."
40+

0 commit comments

Comments
 (0)