[Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2018-1000539/ruby-json-jwt
Salvatore Bonaccorso
carnil at debian.org
Fri Aug 17 12:54:29 BST 2018
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
4b08d1dc by Salvatore Bonaccorso at 2018-08-17T11:53:47Z
Add fixed version for CVE-2018-1000539/ruby-json-jwt
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -6460,7 +6460,7 @@ CVE-2018-1000541
CVE-2018-1000540 (LoboEvolution version < 9b75694cedfa4825d4a2330abf2719d470c654cd ...)
NOT-FOR-US: LoboEvolution
CVE-2018-1000539 (Nov json-jwt version >= 0.5.0 && < 1.9.4 contains a CWE-347: Improper ...)
- - ruby-json-jwt <unfixed> (bug #902721)
+ - ruby-json-jwt 1.9.4-1 (bug #902721)
NOTE: https://github.com/nov/json-jwt/pull/62
NOTE: https://github.com/nov/json-jwt/commit/3393f394f271c87bd42ec23c300727b4437d1638
CVE-2018-1000538 (Minio Inc. Minio S3 server version prior to ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/4b08d1dc38af9fd4aa23988d51a59076fb0c7df2
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/4b08d1dc38af9fd4aa23988d51a59076fb0c7df2
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180817/54f8b503/attachment.html>
More information about the debian-security-tracker-commits
mailing list