[Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2018-1000539/ruby-json-jwt

Salvatore Bonaccorso carnil at debian.org
Fri Aug 17 12:54:29 BST 2018


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4b08d1dc by Salvatore Bonaccorso at 2018-08-17T11:53:47Z
Add fixed version for CVE-2018-1000539/ruby-json-jwt

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -6460,7 +6460,7 @@ CVE-2018-1000541
 CVE-2018-1000540 (LoboEvolution version < 9b75694cedfa4825d4a2330abf2719d470c654cd ...)
 	NOT-FOR-US: LoboEvolution
 CVE-2018-1000539 (Nov json-jwt version >= 0.5.0 && < 1.9.4 contains a CWE-347: Improper ...)
-	- ruby-json-jwt <unfixed> (bug #902721)
+	- ruby-json-jwt 1.9.4-1 (bug #902721)
 	NOTE: https://github.com/nov/json-jwt/pull/62
 	NOTE: https://github.com/nov/json-jwt/commit/3393f394f271c87bd42ec23c300727b4437d1638
 CVE-2018-1000538 (Minio Inc. Minio S3 server version prior to ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/4b08d1dc38af9fd4aa23988d51a59076fb0c7df2

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/4b08d1dc38af9fd4aa23988d51a59076fb0c7df2
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180817/54f8b503/attachment.html>


More information about the debian-security-tracker-commits mailing list