[Git][security-tracker-team/security-tracker][master] CVE-2018-16471/ruby-rack fixed in unstable

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
fbdc3a6d by Salvatore Bonaccorso at 2018-11-21T11:36:00Z
CVE-2018-16471/ruby-rack fixed in unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -7515,7 +7515,7 @@ CVE-2018-16473 (A path traversal in takeapeek module versions <=0.2.2 allows
 CVE-2018-16472 (A prototype pollution attack in cached-path-relative versions <=1.0.1 ...)
 	NOT-FOR-US: cached-path-relative
 CVE-2018-16471 (There is a possible XSS vulnerability in Rack before 2.0.6 and 1.6.11. ...)
-	- ruby-rack <unfixed> (bug #913005)
+	- ruby-rack 1.6.4-6 (bug #913005)
 	[stretch] - ruby-rack <no-dsa> (Minor issue)
 	NOTE: Fixed by: https://github.com/rack/rack/commit/e5d58031b766e49687157b45edab1b8457d972bd (master)
 	NOTE: Fixed by: https://github.com/rack/rack/commit/313dd6a05a5924ed6c82072299c53fed09e39ae7 (2.0.6)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/fbdc3a6d1169996204b510d85eef4d62a5554970

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/fbdc3a6d1169996204b510d85eef4d62a5554970
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20181121/63b0d89b/attachment.html>