[Git][security-tracker-team/security-tracker][master] Add CVE-2019-15845/ruby

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6bba6dea by Salvatore Bonaccorso at 2019-11-20T06:34:17Z
Add CVE-2019-15845/ruby

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -11520,8 +11520,14 @@ CVE-2019-15846 (Exim before 4.92.2 allows remote attackers to execute arbitrary
 	- exim4 4.92.1-3
 	NOTE: https://www.openwall.com/lists/oss-security/2019/09/04/1
 	NOTE: https://git.exim.org/exim.git/commit/2600301ba6dbac5c9d640c87007a07ee6dcea1f4
-CVE-2019-15845
+CVE-2019-15845 [A NUL injection vulnerability of File.fnmatch and File.fnmatch?]
 	RESERVED
+	- ruby2.5 2.5.7-1
+	- ruby2.3 <removed>
+	- ruby2.1 <removed>
+	- jruby <unfixed>
+	NOTE: https://github.com/ruby/ruby/commit/a0a2640b398cffd351f87d3f6243103add66575b
+	NOTE: https://www.ruby-lang.org/en/news/2019/10/01/nul-injection-file-fnmatch-cve-2019-15845/
 CVE-2019-15844
 	RESERVED
 CVE-2019-15843 (A malicious file upload vulnerability was discovered in Xiaomi Millet  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/6bba6dead1f104827883fedd5500c694f55c713f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/6bba6dead1f104827883fedd5500c694f55c713f
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191120/c35ad434/attachment.html>