Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
412cc47e by Salvatore Bonaccorso at 2021-07-08T09:27:05+02:00
Add CVE-2021-31799/ruby
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -10312,8 +10312,13 @@ CVE-2021-31800 (Multiple path traversal
vulnerabilities exist in smbserver.py in
[buster] - impacket <no-dsa> (Minor issue)
[stretch] - impacket <no-dsa> (Minor issue)
NOTE:
https://github.com/SecureAuthCorp/impacket/commit/49c643bf66620646884ed141c94e5fdd85bcdd2f
-CVE-2021-31799
+CVE-2021-31799 [A command injection vulnerability in RDoc]
RESERVED
+ - ruby2.7 <unfixed>
+ - ruby2.5 <removed>
+ - ruby2.3 <removed>
+ NOTE:
https://www.ruby-lang.org/en/news/2021/05/02/os-command-injection-in-rdoc/
+ NOTE:
https://github.com/ruby/rdoc/commit/a7f5d6ab88632b3b482fe10611382ff73d14eed7
CVE-2021-31798
RESERVED
CVE-2021-31797
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/412cc47e91c62dc9f23377cf70b6319e85720d3f
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/412cc47e91c62dc9f23377cf70b6319e85720d3f
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
