[Git][security-tracker-team/security-tracker][master] Add CVE-2020-11020/ruby-faye
Salvatore Bonaccorso
carnil at debian.org
Fri May 1 14:42:37 BST 2020
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
b817f30d by Salvatore Bonaccorso at 2020-05-01T15:41:34+02:00
Add CVE-2020-11020/ruby-faye
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -4772,7 +4772,9 @@ CVE-2020-11022 (In jQuery versions greater than or equal to 1.2 and before 3.5.0
CVE-2020-11021 (Actions Http-Client (NPM @actions/http-client) before version 1.0.8 ca ...)
TODO: check
CVE-2020-11020 (Faye (NPM, RubyGem) versions greater than 0.5.0 and before 1.0.4, 1.1. ...)
- TODO: check
+ - ruby-faye <unfixed>
+ NOTE: https://github.com/faye/faye/security/advisories/GHSA-qpg4-4w7w-2mq5
+ NOTE: https://github.com/faye/faye/commit/65d297d341b607f3cb0b5fa6021a625a991cc30e
CVE-2020-11019
RESERVED
CVE-2020-11018
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b817f30d72573cc78b6f5222e705cbd4b5ce22ba
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b817f30d72573cc78b6f5222e705cbd4b5ce22ba
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200501/fe660611/attachment.html>
More information about the debian-security-tracker-commits
mailing list