Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
5f84c676 by Moritz Muehlenhoff at 2024-06-05T13:43:31+02:00
new rails issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -51,7 +51,9 @@ CVE-2024-32975 (Envoy is a cloud-native, open source edge and
service proxy. The
CVE-2024-32974 (Envoy is a cloud-native, open source edge and service proxy. A
crash w ...)
- envoyproxy <itp> (bug #987544)
CVE-2024-32464 (Action Text brings rich text content and editing to Rails.
Instances o ...)
- TODO: check
+ - rails <not-affected> (Only affects 7.1.x)
+ NOTE:
https://github.com/rails/rails/security/advisories/GHSA-prjp-h48f-jgf6
+ NOTE:
https://github.com/rails/rails/commit/e215bf3360e6dfe1497c1503a495e384ed6b0995
CVE-2024-30889 (Cross Site Scripting vulnerability in audimex audimexEE
v.15.1.2 and f ...)
NOT-FOR-US: audimexEE
CVE-2024-2368 (The Mollie Forms plugin for WordPress is vulnerable to
Cross-Site Requ ...)
@@ -59,7 +61,9 @@ CVE-2024-2368 (The Mollie Forms plugin for WordPress is
vulnerable to Cross-Site
CVE-2024-2087 (The Brizy \u2013 Page Builder plugin for WordPress is
vulnerable to St ...)
NOT-FOR-US: WordPress plugin
CVE-2024-28103 (Action Pack is a framework for handling and responding to web
requests ...)
- TODO: check
+ - rails <unfixed>
+ NOTE:
https://github.com/rails/rails/security/advisories/GHSA-fwhr-88qx-h9g7
+ NOTE:
https://github.com/rails/rails/commit/35858f1d9d57f6c4050a8d9ab754bd5d088b4523
CVE-2024-23669 (An improper authorization in Fortinet FortiWebManager version
7.2.0 an ...)
NOT-FOR-US: Fortinet
CVE-2024-23326 (Envoy is a cloud-native, open source edge and service proxy. A
theoret ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5f84c676281711712c87ad421dec4c0e5ce3fb5e
--
This project does not include diff previews in email notifications.
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5f84c676281711712c87ad421dec4c0e5ce3fb5e
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
