Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
77b705d3 by Moritz Muehlenhoff at 2025-03-04T11:52:05+01:00
new issue in uri gem
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,7 +1,14 @@
CVE-2025-27521 (Vulnerability of improper access permission in the process
management ...)
TODO: check
CVE-2025-27221 (In the URI gem before 1.0.3 for Ruby, the URI handling methods
(URI.jo ...)
- TODO: check
+ - ruby3.3 <unfixed>
+ - ruby3.1 <unfixed>
+ - ruby2.7 <removed>
+ - rubygems <unfixed>
+ NOTE:
https://github.com/ruby/uri/commit/3675494839112b64d5f082a9068237b277ed1495
(v1.0.3)
+ NOTE:
https://github.com/ruby/uri/commit/2789182478f42ccbb62197f952eb730e4f02bfc5
(v1.0.3)
+ NOTE: https://github.com/ruby/uri/pull/154
+ NOTE:
https://github.com/rubysec/ruby-advisory-db/blob/master/gems/uri/CVE-2025-27221.yml
CVE-2025-27220 (In the CGI gem before 0.4.2 for Ruby, a Regular Expression
Denial of S ...)
TODO: check
CVE-2025-27219 (In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse
method in ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/77b705d3b134101307273c2d3524b62514cdbe3b
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/77b705d3b134101307273c2d3524b62514cdbe3b
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
