Aron Xu pushed to branch master at Debian Security Tracker / security-tracker
Commits:
069f696a by Aron Xu at 2023-03-13T10:59:44+08:00
Reserve DSA-5372-1 for rails
- - - - -
3 changed files:
- data/CVE/list
- data/DSA/list
- data/dsa-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -160805,7 +160805,6 @@ CVE-2021-22943 (A vulnerability found in UniFi
Protect application V1.18.1 and e
CVE-2021-22942 (A possible open redirect vulnerability in the Host
Authorization middl ...)
[experimental] - rails 2:6.1.4.1+dfsg-1
- rails 2:6.1.4.1+dfsg-3 (bug #992586)
- [bullseye] - rails <no-dsa> (Minor issue)
[buster] - rails <not-affected> (Vulnerable code not present)
[stretch] - rails <not-affected> (Vulnerable code not present)
NOTE: https://www.openwall.com/lists/oss-security/2021/08/20/1
=====================================
data/DSA/list
=====================================
@@ -1,3 +1,6 @@
+[13 Mar 2023] DSA-5372-1 rails - security update
+ {CVE-2021-22942 CVE-2021-44528 CVE-2022-21831 CVE-2022-22577
CVE-2022-23633 CVE-2022-27777 CVE-2023-22792 CVE-2023-22794 CVE-2023-22795
CVE-2023-22796}
+ [bullseye] - rails 2:6.0.3.7+dfsg-2+deb11u1
[09 Mar 2023] DSA-5371-1 chromium - security update
{CVE-2023-1213 CVE-2023-1214 CVE-2023-1215 CVE-2023-1216 CVE-2023-1217
CVE-2023-1218 CVE-2023-1219 CVE-2023-1220 CVE-2023-1221 CVE-2023-1222
CVE-2023-1223 CVE-2023-1224 CVE-2023-1225 CVE-2023-1226 CVE-2023-1227
CVE-2023-1228 CVE-2023-1229 CVE-2023-1230 CVE-2023-1231 CVE-2023-1232
CVE-2023-1233 CVE-2023-1234 CVE-2023-1235 CVE-2023-1236}
[bullseye] - chromium 111.0.5563.64-1~deb11u1
=====================================
data/dsa-needed.txt
=====================================
@@ -37,8 +37,6 @@ php-horde-turba
--
py7zr
--
-rails (aron)
---
ring
might make sense to rebase to current version
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/069f696a6c6326073e6f85aa6fd93f27280c0592
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/069f696a6c6326073e6f85aa6fd93f27280c0592
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
