Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
cada0ffb by Salvatore Bonaccorso at 2018-07-13T22:17:54+02:00
Add CVE-2018-1000211/ruby-doorkeeper
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -33,7 +33,9 @@ CVE-2018-14038
CVE-2018-14037
RESERVED
CVE-2018-1000211 (Doorkeeper version 4.2.0 and later contains a Incorrect
Access Control ...)
- TODO: check
+ - ruby-doorkeeper <unfixed>
+ NOTE: https://github.com/doorkeeper-gem/doorkeeper/issues/891
+ NOTE: https://github.com/doorkeeper-gem/doorkeeper/pull/1119
CVE-2018-1000210 (YamlDotNet version 4.3.2 and earlier contains a Insecure
Direct Object ...)
TODO: check
CVE-2018-1000209 (Sensu, Inc. Sensu Core version Before version 1.4.2-3
contains a ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/cada0ffbfe75aef9c11ec20363e2b955876ca11a
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/cada0ffbfe75aef9c11ec20363e2b955876ca11a
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
