alpine · CVE-2023-5077

Quick triage

View at Official alpine advisory, NVD, CVE.org · CVE detail

Freshness: no update timestamp found; verify against the upstream OS advisory manually.

Tracker summary

CVE-2023-5077: 1 source package rows (vault); 10 state rows across 1 repos (edge-community); fixed 1, open 9.

Description:

The Vault and Vault Enterprise ("Vault") Google Cloud secrets engine did not preserve existing Google Cloud IAM Conditions upon creating or updating rolesets. Fixed in Vault 1.13.0.