Thorsten Alteholz pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
b84b4f9f by Thorsten Alteholz at 2019-11-23T18:17:53Z
add link to commit for fix of CVE-2019-16255 in ruby2.5
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -10643,6 +10643,7 @@ CVE-2019-16255 [A code injection vulnerability of
Shell#[] and Shell#test]
- ruby2.1 <removed>
- jruby <unfixed>
NOTE:
https://www.ruby-lang.org/en/news/2019/10/01/code-injection-shell-test-cve-2019-16255/
+ NOTE: ruby2.5:
https://github.com/ruby/ruby/commit/3af01ae1101e0b8815ae5a106be64b0e82a58640
CVE-2019-16254 [HTTP response splitting in WEBrick (Additional fix)]
RESERVED
- ruby2.5 2.5.7-1
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/b84b4f9f1a073f5b3292977c4384fad0bea973e6
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/b84b4f9f1a073f5b3292977c4384fad0bea973e6
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
