[From nobody Fri Jul 24 15:23:07 2026 Received: (at submit) by bugs.debian.org; 4 Jul 2026 15:06:23 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-11.0 required=4.0 tests=BAYES_00,FROMDEVELOPER, MD5_SHA1_SUM,NO_RELAYS,XMAILER_REPORTBUG autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 26; hammy, 149; neutral, 44; spammy, 1. spammytokens:0.941-+--H*r:bugs.debian.org hammytokens:0.000-+--H*F:U*carnil, 0.000-+--XDebbugsCc, 0.000-+--X-Debbugs-Cc, 0.000-+--H*Ad:N*Bug, 0.000-+--H*Ad:N*Tracking Return-path: <carnil@debian.org> Received: via submission by buxtehude.debian.org with esmtp (Exim 4.96) (envelope-from <carnil@debian.org>) id 1wg1wl-005Rd5-1z for submit@bugs.debian.org; Sat, 04 Jul 2026 15:06:23 +0000 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Salvatore Bonaccorso <carnil@debian.org> To: Debian Bug Tracking System <submit@bugs.debian.org> Subject: ruby-puppet-resource-api: CVE-2026-8804 Message-ID: <178317758180.2590786.7474604275064483990.reportbug@eldamar.lan> X-Mailer: reportbug 13.2.0+nmu1 Date: Sat, 04 Jul 2026 17:06:21 +0200 Delivered-To: submit@bugs.debian.org U291cmNlOiBydWJ5LXB1cHBldC1yZXNvdXJjZS1hcGkKVmVyc2lvbjogMS45LjAtMQpTZXZlcml0 eTogaW1wb3J0YW50ClRhZ3M6IHNlY3VyaXR5IHVwc3RyZWFtCkZvcndhcmRlZDogaHR0cHM6Ly9n aXRodWIuY29tL3B1cHBldGxhYnMvcHVwcGV0LXJlc291cmNlX2FwaS9wdWxsLzM4NApYLURlYmJ1 Z3MtQ2M6IGNhcm5pbEBkZWJpYW4ub3JnLCBEZWJpYW4gU2VjdXJpdHkgVGVhbSA8dGVhbUBzZWN1 cml0eS5kZWJpYW4ub3JnPgoKSGksCgpUaGUgZm9sbG93aW5nIHZ1bG5lcmFiaWxpdHkgd2FzIHB1 Ymxpc2hlZCBmb3IgcnVieS1wdXBwZXQtcmVzb3VyY2UtYXBpLgoKQ1ZFLTIwMjYtODgwNFswXToK fCBQdXBwZXQgcmVzb3VyY2VfYXBpIChzaGlwcGVkIGluIFB1cHBldCBDb3JlIDgueCBhbmQgUHVw cGV0CnwgRW50ZXJwcmlzZSAyMDIzLjgueCBhbmQgMjAyNS54KSBkb2VzIG5vdCBwcmVzZXJ2ZSB0 aGUgc2Vuc2l0aXZlIGZsYWcKfCBvbiBwYXJhbWV0ZXJzIGRlZmluZWQgdmlhIHRoZSByZXNvdXJj ZS1hcGksIGNhdXNpbmcgdmFsdWVzIHN1Y2ggYXMKfCBwYXNzd29yZHMgdG8gYmUgc3RvcmVkIGlu IGNsZWFydGV4dCBpbiB0aGUgYWdlbnQncyBsb2NhbCB0cmFuc2FjdGlvbgp8IHN0YXRlIGNhY2hl LiBBZmZlY3RlZCB2ZXJzaW9ucyBvZiB0aGUgcmVzb3VyY2VfYXBpIG1vZHVsZSBpbmNsdWRlCnwg YWxsIHZlcnNpb25zIGJldHdlZW4gMS41LjAgLSAxLjkuMSBhbmQgMi4wLjAgVGhlIGlzc3VlIHdh cyBmaXhlZCBpbgp8IHB1cHBldCByZXNvdXJjZV9hcGnCoDEuOS4yIGFuZCAyLjAuMSByZWxlYXNl ZCB3aXRoIFB1cHBldCBDb3JlIDguMjAuMAp8IGFuZCBQRSAyMDIzLjguMTAgJiBQRSAyMDI1LjEx LjAuCgoKSWYgeW91IGZpeCB0aGUgdnVsbmVyYWJpbGl0eSBwbGVhc2UgYWxzbyBtYWtlIHN1cmUg dG8gaW5jbHVkZSB0aGUKQ1ZFIChDb21tb24gVnVsbmVyYWJpbGl0aWVzICYgRXhwb3N1cmVzKSBp ZCBpbiB5b3VyIGNoYW5nZWxvZyBlbnRyeS4KCkZvciBmdXJ0aGVyIGluZm9ybWF0aW9uIHNlZToK ClswXSBodHRwczovL3NlY3VyaXR5LXRyYWNrZXIuZGViaWFuLm9yZy90cmFja2VyL0NWRS0yMDI2 LTg4MDQKICAgIGh0dHBzOi8vd3d3LmN2ZS5vcmcvQ1ZFUmVjb3JkP2lkPUNWRS0yMDI2LTg4MDQK WzFdIGh0dHBzOi8vZ2l0aHViLmNvbS9wdXBwZXRsYWJzL3B1cHBldC1yZXNvdXJjZV9hcGkvcHVs bC8zODQKWzJdIGh0dHBzOi8vZ2l0aHViLmNvbS9wdXBwZXRsYWJzL3B1cHBldC1yZXNvdXJjZV9h cGkvY29tbWl0Lzg3NzM3ZGVmOThlNWIyOTlmY2Q3OGIxOTgxNTliY2E4OGJlOTkxZTcKClBsZWFz ZSBhZGp1c3QgdGhlIGFmZmVjdGVkIHZlcnNpb25zIGluIHRoZSBCVFMgYXMgbmVlZGVkLgoKUmVn YXJkcywKU2FsdmF0b3JlCg== ]