Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
19f1549d by Salvatore Bonaccorso at 2026-07-30T10:18:31+02:00
Reference upstream commit for CVE-2026-66066
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,6 +1,7 @@
CVE-2026-66066 [Possible arbitrary file read and remote code execution in
Active Storage variant processing]
- rails <unfixed>
NOTE:
https://github.com/rails/rails/security/advisories/GHSA-xr9x-r78c-5hrm
+ NOTE: Fixed by:
https://github.com/rails/rails/commit/d79b7f4aa17dec8ce4960fef05733c8c0c7ef49a
(v7.2.3.2)
CVE-2026-6336 (GitLab has remediated an issue in GitLab CE/EE affecting all
versions ...)
NOT-FOR-US: GitLab (used to be packaged in the Debian archive as
src:gitlab, but never in a stable release)
CVE-2026-6267 (GitLab has remediated an issue in GitLab CE/EE affecting all
versions ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/19f1549d50db147538235723d7994c142a7b8c5f
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/19f1549d50db147538235723d7994c142a7b8c5f
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
