Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
4abc4034 by Moritz Muehlenhoff at 2025-03-11T15:11:18+01:00
new ruby-rack issue
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -53,7 +53,9 @@ CVE-2025-27911 (An issue was discovered in Datalust Seq
before 2024.3.13545. Exp
CVE-2025-27910 (tianti v2.3 was discovered to contain a Cross-Site Request
Forgery (CS ...)
NOT-FOR-US: tianti
CVE-2025-27610 (Rack provides an interface for developing web applications in
Ruby. Pr ...)
- TODO: check
+ - ruby-rack <unfixed>
+ NOTE:
https://github.com/rack/rack/security/advisories/GHSA-7wqh-767x-r66v
+ NOTE:
https://github.com/rack/rack/commit/50caab74fa01ee8f5dbdee7bb2782126d20c6583
CVE-2025-27436 (The Manage Bank Statements in SAP S/4HANA does not perform
required ac ...)
NOT-FOR-US: SAP
CVE-2025-27434 (Due to insufficient input validation, SAP Commerce (Swagger
UI) allows ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4abc403441a72319b15413770d2105411b5d36b3
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4abc403441a72319b15413770d2105411b5d36b3
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits