[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2020-1107{6,7}/puma

Salvatore Bonaccorso carnil at debian.org
Mon Oct 12 20:09:58 BST 2020



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
44b57d85 by Salvatore Bonaccorso at 2020-10-12T21:09:14+02:00
Add Debian bug reference for CVE-2020-1107{6,7}/puma

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -36672,11 +36672,11 @@ CVE-2020-11078 (In httplib2 before version 0.18.0, an attacker controlling unesc
 	NOTE: https://github.com/httplib2/httplib2/commit/a1457cc31f3206cf691d11d2bf34e98865873e9e
 CVE-2020-11077 (In Puma (RubyGem) before 4.3.5 and 3.12.6, a client could smuggle a re ...)
 	{DLA-2398-1}
-	- puma <unfixed>
+	- puma <unfixed> (bug #972102)
 	NOTE: https://github.com/puma/puma/security/advisories/GHSA-w64w-qqph-5gxm
 CVE-2020-11076 (In Puma (RubyGem) before 4.3.4 and 3.12.5, an attacker could smuggle a ...)
 	{DLA-2398-1}
-	- puma <unfixed>
+	- puma <unfixed> (bug #972102)
 	NOTE: https://github.com/puma/puma/security/advisories/GHSA-x7jg-6pwg-fx5h
 	NOTE: https://github.com/puma/puma/commit/f24d5521295a2152c286abb0a45a1e1e2bd275bd
 CVE-2020-11075 (In Anchore Engine version 0.7.0, a specially crafted container image m ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/44b57d85b31a0c9f149624f0106dfc0fe9300ea2

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/44b57d85b31a0c9f149624f0106dfc0fe9300ea2
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20201012/9b531b0a/attachment.html>


More information about the debian-security-tracker-commits mailing list