[Git][security-tracker-team/security-tracker][master] Add information on introducing commit for CVE-2019-1020001

[Adrian Bunk]

Adrian Bunk pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f0bfdcf1 by Adrian Bunk at 2019-11-30T20:28:18Z
Add information on introducing commit for CVE-2019-1020001

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -18218,8 +18218,9 @@ CVE-2019-1020001 (yard before 0.9.20 allows path traversal. ...)
 	- yard <unfixed> (low; bug #945369)
 	[buster] - yard <no-dsa> (Minor issue)
 	[stretch] - yard <no-dsa> (Minor issue)
-	[jessie] - yard <not-affected> (Bug was introduced in 0.9.6) 
+	[jessie] - yard <not-affected> (Bug was introduced in 0.9.6)
 	NOTE: https://github.com/lsegal/yard/security/advisories/GHSA-xfhh-rx56-rxcr
+	NOTE: Introduced in: https://github.com/lsegal/yard/commit/b32a2efe40e7bd8e5daac7fae119493376a73cde (0.9.6)
 CVE-2018-20857 (Zendesk Samlr before 2.6.2 allows an XML nodes comment attack such as  ...)
 	NOT-FOR-US: Zendesk Samlr
 CVE-2019-14282 (The simple_captcha2 gem 0.2.3 for Ruby, as distributed on RubyGems.org ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/f0bfdcf1f3e0325ee1a58ec31cac115319b4d158

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/f0bfdcf1f3e0325ee1a58ec31cac115319b4d158
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191130/dd209b3e/attachment.html>