Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
5529f940 by Salvatore Bonaccorso at 2024-08-24T09:45:34+02:00
Update status for CVE-2024-43791/ruby-request-store
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -43,7 +43,8 @@ CVE-2024-44381 (D-Link DI_8004W 16.07.26A1 contains a command
execution vulnerab
CVE-2024-43794 (OpenSearch Dashboards Security Plugin adds a configuration
management ...)
NOT-FOR-US: OpenSearch Dashboards Security Plugin
CVE-2024-43791 (RequestStore provides per-request global storage for Rack. The
files p ...)
- TODO: check
+ - ruby-request-store <not-affected> (Debian packaging not affected by
the world-writable permissions on installed files)
+ NOTE:
https://github.com/steveklabnik/request_store/security/advisories/GHSA-frp2-5qfc-7r8m
CVE-2024-43782 (This openedx-translations repository contains translation
files from O ...)
TODO: check
CVE-2024-43032 (autMan v2.9.6 allows attackers to bypass authentication via a
crafted ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5529f9409ddd664a2b684f5b3bfc200110ed28a0
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5529f9409ddd664a2b684f5b3bfc200110ed28a0
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
