Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
cfe1ab89 by Salvatore Bonaccorso at 2022-05-27T21:30:34+02:00
Reference upstream commits for CVE-2022-22577
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -27860,7 +27860,9 @@ CVE-2022-22578 (A logic issue was addressed with
improved validation. This issue
CVE-2022-22577 (An XSS Vulnerability in Action Pack >= 5.2.0 and < 5.2.0
that co ...)
- rails <unfixed> (bug #1011941)
NOTE:
https://discuss.rubyonrails.org/t/cve-2022-22577-possible-xss-vulnerability-in-action-pack/80533
- NOTE:
https://github.com/rails/rails/commit/2b820a2a69fa50cffa74b4aedc57bf92ed6910ec
(6-1-stable)
+ NOTE:
https://github.com/rails/rails/commit/2b820a2a69fa50cffa74b4aedc57bf92ed6910ec
(v6.1.5.1)
+ NOTE:
https://github.com/rails/rails/commit/5299b57d596ea274f77f5ffee2b79c6ee0255508
(v6.0.4.8)
+ NOTE:
https://github.com/rails/rails/commit/d2253115ac2b30f5f7210670af906cebf79cf809
(v5.2.7.1)
CVE-2022-22576 (An improper authentication vulnerability exists in curl 7.33.0
to and ...)
- curl 7.83.0-1 (bug #1010295)
NOTE: https://curl.se/docs/CVE-2022-22576.html
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cfe1ab89b5e6814a491ebddaadb38c4cdc83983e
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cfe1ab89b5e6814a491ebddaadb38c4cdc83983e
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
