Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
2c933251 by Salvatore Bonaccorso at 2024-03-25T08:35:00+01:00
Add initial tracking for CVE-2024-27280/ruby
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -5,6 +5,13 @@ CVE-2024-27281 [RCE vulnerability with .rdoc_options in RDoc]
- ruby2.5 <removed>
NOTE:
https://www.ruby-lang.org/en/news/2024/03/21/rce-rdoc-cve-2024-27281/
NOTE:
https://github.com/ruby/rdoc/commit/da7a0c7553ef7250ca665a3fecdc01dbaacbb43d
(v6.6.3)
+CVE-2024-27280 [Buffer overread vulnerability in StringIO]
+ - ruby3.2 <unfixed>
+ - ruby3.1 <unfixed>
+ - ruby2.7 <removed>
+ - ruby2.5 <removed>
+ NOTE:
https://www.ruby-lang.org/en/news/2024/03/21/buffer-overread-cve-2024-27280/
+ TODO: check details
CVE-2024-XXXX [Org mode now considers contents of remote files to be untrusted]
- emacs 1:29.3+1-1 (bug #1067630)
NOTE: https://www.openwall.com/lists/oss-security/2024/03/24/1
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2c9332513c1c3d3f1bc313001c99fd1c1d83ee1d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2c9332513c1c3d3f1bc313001c99fd1c1d83ee1d
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
