Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
c8101342 by Salvatore Bonaccorso at 2021-03-20T13:41:53+01:00
Revert "Triage CVE-2021-28834 in ruby-kramdown for stretch LTS."
This reverts commit c40a35a24ab445f9a3407539fa9ef1930d1a52ae.
The change was probably meant for stretch.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -242,7 +242,6 @@ CVE-2021-28835
RESERVED
CVE-2021-28834 (Kramdown before 2.3.1 does not restrict Rouge formatters to
the Rouge: ...)
- ruby-kramdown <unfixed> (bug #985569)
- [buster] - ruby-kramdown <not-affected> (Vulnerable code added later)
NOTE: https://github.com/gettalong/kramdown/pull/708
NOTE: Fixed by:
https://github.com/gettalong/kramdown/commit/d6a1cbcb2caa2f8a70927f176070d126b2422760
CVE-2021-28833
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c8101342bf2c4bd6c4759e46bf424d9d3a3782cf
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c8101342bf2c4bd6c4759e46bf424d9d3a3782cf
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
