Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
1497b3df by Moritz Muehlenhoff at 2022-07-27T21:43:41+02:00
new rails issue
- - - - -
2 changed files:
- data/CVE/list
- data/dsa-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -11700,6 +11700,8 @@ CVE-2022-32225 (A reflected DOM-Based XSS vulnerability
has been discovered in t
NOT-FOR-US: Veeam
CVE-2022-32224
RESERVED
+ - rails <unfixed>
+ NOTE: https://github.com/advisories/GHSA-3hhc-qp5v-9p2j
CVE-2022-32223 (Node.js is vulnerable to Hijack Execution Flow: DLL Hijacking
under ce ...)
- nodejs <not-affected> (Only affects Windows)
NOTE:
https://nodejs.org/en/blog/vulnerability/july-2022-security-releases/#dll-hijacking-on-windows-high-cve-2022-32223
=====================================
data/dsa-needed.txt
=====================================
@@ -56,6 +56,8 @@ php-horde-turba
--
puma/oldstable
--
+rails
+--
rpki-client/stable
new 7.6 release required libretls, which isn't in Bullseye
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1497b3dfaac6a7a1b95f1d7d91a55b5f712c38f9
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1497b3dfaac6a7a1b95f1d7d91a55b5f712c38f9
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
