Author: carnil
Date: 2015-08-02 13:08:33 +0000 (Sun, 02 Aug 2015)
New Revision: 35846
Modified:
data/CVE/list
Log:
Update information for ruby-sidekiq issues
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2015-08-02 12:13:39 UTC (rev 35845)
+++ data/CVE/list 2015-08-02 13:08:33 UTC (rev 35846)
@@ -9,14 +9,17 @@
NOTE: Fixed by
https://github.com/mperham/sidekiq/commit/cf3c43b2410c4573e05ac119494e41115f4140ad
NOTE: Fix released in sidekiq 3.4.2
NOTE: Follow-up fix:
https://github.com/mperham/sidekiq/commit/75a3524c919857aac16e0541b0cb107f48d00694
+ NOTE: Follow-up commit not included in 3.4.2~dfsg-1
NOTE: CVE Request:
http://www.openwall.com/lists/oss-security/2015/08/01/2
CVE-2015-XXXX [XSS via job arguments display class in Sidekiq::Web]
+ [experimental] - ruby-sidekiq 3.4.2~dfsg-1
- ruby-sidekiq <unfixed>
NOTE: https://github.com/mperham/sidekiq/pull/2309
NOTE: Fixed by
https://github.com/mperham/sidekiq/commit/54766f336620ca0ce3b0b87a7a56382496e64b61
NOTE: Fix released in sidekiq 3.4.0
NOTE: CVE Request:
http://www.openwall.com/lists/oss-security/2015/08/01/2
CVE-2015-XXXX [XSS via queue name in Sidekiq::Web]
+ [experimental] - ruby-sidekiq 3.4.2~dfsg-1
- ruby-sidekiq <unfixed>
NOTE: https://github.com/mperham/sidekiq/issues/2330
NOTE: Fixed by
https://github.com/mperham/sidekiq/commit/2178d66b6686fbf4430223c34c184a64c9906828
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
