Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
a61b74b7 by Salvatore Bonaccorso at 2022-08-19T10:23:50+02:00
Add CVE-2020-36599/ruby-omniauth
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -149,7 +149,9 @@ CVE-2022-2892
CVE-2021-46834
RESERVED
CVE-2020-36599 (lib/omniauth/failure_endpoint.rb in OmniAuth before 2.0 does
not escap ...)
- TODO: check
+ [experimental] - ruby-omniauth 2.0.4-1~exp1
+ - ruby-omniauth <unfixed>
+ NOTE:
https://github.com/omniauth/omniauth/commit/43a396f181ef7d0ed2ec8291c939c95e3ed3ff00#diff-575abda9deb9b1a77bf534e898a923029b9a61e991d626db88dc6e8b34260aa2
(v2.0.0-rc1)
CVE-2020-36598
RESERVED
CVE-2020-36597
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a61b74b7758fde39a556de9ed80572401a061093
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a61b74b7758fde39a556de9ed80572401a061093
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
