Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: e1dc96c6 by Salvatore Bonaccorso at 2018-01-26T18:32:55+01:00 Update information on CVE-2012-6134 - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== --- a/data/CVE/list +++ b/data/CVE/list @@ -168956,7 +168956,7 @@ CVE-2012-6135 - ruby-passenger <not-affected> (Vulnerable code not present; bug #702219) NOTE: 4.0.0 betas only CVE-2012-6134 (Cross-site request forgery (CSRF) vulnerability in the omniauth-oauth2 ...) - NOT-FOR-US: ruby-omniauth, there was a sponsor request, but no ITP: http://osdir.com/ml/debian-mentors/2011-08/msg00662.html + - ruby-omniauth-oauth2 <not-affected> (Fixed in the first version uploaded to Debian) CVE-2012-6133 [XSS flaws in ok and error messages] RESERVED {DLA-298-1} View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/e1dc96c69e39b587ff66563d7a3c41c11c041c4b --- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/e1dc96c69e39b587ff66563d7a3c41c11c041c4b You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ Secure-testing-commits mailing list Secure-testing-commits@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits