[Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2020-7981/ruby-geocoder in unstable

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f92e43c6 by Salvatore Bonaccorso at 2020-02-08T07:48:35+01:00
Add fixed version for CVE-2020-7981/ruby-geocoder in unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1773,7 +1773,7 @@ CVE-2019-20421 (In Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2, an
 CVE-2020-7982
 	RESERVED
 CVE-2020-7981 (sql.rb in Geocoder before 1.6.1 allows Boolean-based SQL injection whe ...)
-	- ruby-geocoder <unfixed> (bug #949870)
+	- ruby-geocoder 1.5.1-3 (bug #949870)
 	NOTE: https://github.com/alexreisner/geocoder/commit/dcdc3d8675411edce3965941a2ca7c441ca48613
 CVE-2020-7980 (Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary  ...)
 	NOT-FOR-US: Intellian Aptus Web



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/f92e43c6b386153ab98434e136aa1d2792a00854

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/f92e43c6b386153ab98434e136aa1d2792a00854
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200208/15699e79/attachment-0001.html>