Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d9029a38 by Salvatore Bonaccorso at 2024-03-01T12:31:22+01:00
Reference as well upstream followup fixes for CVE-2024-27285
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -613,7 +613,10 @@ CVE-2024-27515 (Osclass 5.1.2 is vulnerable to SQL
Injection.)
CVE-2024-27285 (YARD is a Ruby Documentation tool. The "frames.html" file
within the Y ...)
- yard 0.9.35-1 (bug #1065118)
NOTE:
https://github.com/lsegal/yard/security/advisories/GHSA-8mq4-9jjh-9xrc
- NOTE:
https://github.com/lsegal/yard/commit/d78fc393d603c4fc35975969296ed381146a29d4
(v0.9.35)
+ NOTE: Fixed by:
https://github.com/lsegal/yard/commit/d78fc393d603c4fc35975969296ed381146a29d4
(v0.9.35)
+ NOTE: Followup:
https://github.com/lsegal/yard/commit/c88406e4b78f8dd4ba38c79eea0bcec716dbbef8
(v0.9.36)
+ NOTE: Followup:
https://github.com/lsegal/yard/commit/2a0b9990b64ceeeb0456177c593e36e204a06df1
(v0.9.36)
+ NOTE: Followup:
https://github.com/lsegal/yard/commit/a831a596b2a7cabdd2e17855dd179af2ebf3d559
(v0.9.36)
CVE-2024-27284 (cassandra-rs is a Cassandra (CQL) driver for Rust. Code that
attempts ...)
NOT-FOR-US: Rust crate cassandra-rs
CVE-2024-27103 (Querybook is a Big Data Querying UI. When a user searches for
their qu ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d9029a3841e9350517edc52fddbf820215b4604a
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d9029a3841e9350517edc52fddbf820215b4604a
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
