Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
028ae4f1 by Salvatore Bonaccorso at 2019-12-14T21:31:29Z
Add reference for CVE-2019-15845/ruby2.5
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -17285,6 +17285,7 @@ CVE-2019-15845 (Ruby through 2.4.7, 2.5.x through
2.5.6, and 2.6.x through 2.6.4
- jruby <unfixed>
[jessie] - jruby <not-affected> (vulnerable code is not present)
NOTE:
https://github.com/ruby/ruby/commit/a0a2640b398cffd351f87d3f6243103add66575b
+ NOTE: https://hackerone.com/reports/449617
NOTE:
https://www.ruby-lang.org/en/news/2019/10/01/nul-injection-file-fnmatch-cve-2019-15845/
CVE-2019-15844
RESERVED
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/028ae4f1f08f29616d0e268d1bf2e21d92b20525
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/028ae4f1f08f29616d0e268d1bf2e21d92b20525
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
