[Git][security-tracker-team/security-tracker][master] Add CVE-2014-10077/ruby-i18n

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9c0c1a27 by Salvatore Bonaccorso at 2018-11-06T20:44:24Z
Add CVE-2014-10077/ruby-i18n

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -135,7 +135,9 @@ CVE-2018-18982
 CVE-2018-18981
 	RESERVED
 CVE-2014-10077 (Hash#slice in lib/i18n/core_ext/hash.rb in the i18n gem before 0.8.0 ...)
-	TODO: check
+	- ruby-i18n <unfixed>
+	NOTE: https://github.com/svenfuchs/i18n/pull/289
+	NOTE: https://github.com/svenfuchs/i18n/commit/24e71a9a4901ed18c9cab5c53109fd9bf2416bcb
 CVE-2018-18980 (An XML External Entity injection (XXE) vulnerability exists in Zoho ...)
 	NOT-FOR-US: Zoho ManageEngine Network Configuration Manager and OpManager
 CVE-2018-18979



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/9c0c1a272b8c5a652256d754841129361a2be979

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/9c0c1a272b8c5a652256d754841129361a2be979
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20181106/13c29091/attachment.html>