Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e3bfd5cc by Salvatore Bonaccorso at 2026-09-08T17:44:48+02:00
Track fixed version for ruby-rodauth via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -7195,19 +7195,19 @@ CVE-2026-82473 (KubeEdge CloudCore through 1.23.1
accepts node task status repor
CVE-2026-82472 (Documenso before 2.13.0 accepts PDF file uploads on the
/api/files/upl ...)
NOT-FOR-US: Documenso
CVE-2026-82470 (Rodauth before 2.47.0 contains a time-based one-time password
reuse vu ...)
- - ruby-rodauth <unfixed> (bug #1146126)
+ - ruby-rodauth 2.47.0-1 (bug #1146126)
NOTE:
https://github.com/jeremyevans/rodauth/security/advisories/GHSA-hhvg-6qmv-58vc
NOTE: Fixed by:
https://github.com/jeremyevans/rodauth/commit/3bfd0a11bae70935b1944e71dbe787dd0c3a62ad
(2.47.0)
CVE-2026-82469 (Rodauth before 2.47.0 contains an authentication bypass
vulnerability ...)
- - ruby-rodauth <unfixed> (bug #1146126)
+ - ruby-rodauth 2.47.0-1 (bug #1146126)
NOTE:
https://github.com/jeremyevans/rodauth/security/advisories/GHSA-w4fg-qf56-62m2
NOTE: Fixed by:
https://github.com/jeremyevans/rodauth/commit/8174690cef743177111fb1d9184d129ff4700933
(2.47.0)
CVE-2026-82468 (Rodauth before 2.47.0 contains a cross-site request forgery
protection ...)
- - ruby-rodauth <unfixed> (bug #1146126)
+ - ruby-rodauth 2.47.0-1 (bug #1146126)
NOTE:
https://github.com/jeremyevans/rodauth/security/advisories/GHSA-hh2f-xw94-5p79
NOTE: Fixed by:
https://github.com/jeremyevans/rodauth/commit/3e0d7ab2d49a5733d1afcaaf1062b8a8258aa57a
(2.47.0)
CVE-2026-82467 (Rodauth before 2.47.0 fails to validate protocol-relative
return-to pa ...)
- - ruby-rodauth <unfixed> (bug #1146126)
+ - ruby-rodauth 2.47.0-1 (bug #1146126)
NOTE:
https://github.com/jeremyevans/rodauth/security/advisories/GHSA-h9m4-vm9w-h43m
NOTE: Fixed by:
https://github.com/jeremyevans/rodauth/commit/295044a92e358479afdf84f905dd5efe89c39aea
(2.47.0)
CVE-2026-82466 (Rodauth before 2.46.0 contains an authentication bypass
vulnerability ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e3bfd5cc7419c8ba2be910829edf4d186cd52d10
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e3bfd5cc7419c8ba2be910829edf4d186cd52d10
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
