Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
ea1dd03e by Salvatore Bonaccorso at 2019-01-07T06:58:06Z
Add fixed version for CVE-2018-16476/rails
- - - - -
25a10cc7 by Salvatore Bonaccorso at 2019-01-07T07:00:23Z
Update status for CVE-2018-16477/rails
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -21827,10 +21827,13 @@ CVE-2018-16479
CVE-2018-16478 (A Path Traversal in simplehttpserver versions <=0.2.1
allows to list ...)
NOT-FOR-US: simplehttpserver
CVE-2018-16477 (A bypass vulnerability in Active Storage >= 5.2.0 for
Google Cloud ...)
- - rails <not-affected> (Only affects >= 5.2.0; vulnerable code not
present)
+ - rails 2:5.2.2+dfsg-1 (bug #914848)
+ [stretch] - rails <not-affected> (Only affects >= 5.2.0; vulnerable
code not present)
+ [jessie] - rails <not-affected> (Only affects >= 5.2.0; vulnerable code
not present)
NOTE: https://www.openwall.com/lists/oss-security/2018/11/27/5
+ NOTE: Originally no version was affected until 2:5.2.0+dfsg-2 was
uploaded to unstable.
CVE-2018-16476 (A Broken Access Control vulnerability in Active Job versions
>= 4.2.0 ...)
- - rails <unfixed> (bug #914847)
+ - rails 2:5.2.2+dfsg-1 (bug #914847)
[jessie] - rails <not-affected> (only affects >= 4.2.0)
NOTE: https://www.openwall.com/lists/oss-security/2018/11/27/4
CVE-2018-16475 (A Path Traversal in Knightjs versions <= 0.0.1 allows an
attacker to ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/compare/5386d8d19678b3d59f3e1d540139bc9cddbb5df3...25a10cc79368f466fee86bc3add00d98e2115fa6
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/compare/5386d8d19678b3d59f3e1d540139bc9cddbb5df3...25a10cc79368f466fee86bc3add00d98e2115fa6
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
