[Git][security-tracker-team/security-tracker][master] puma fixed in sid, add spu entries

[Moritz Muehlenhoff]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
303de702 by Moritz Mühlenhoff at 2020-10-16T09:06:07+02:00
puma fixed in sid, add spu entries

- - - - -


2 changed files:

- data/CVE/list
- data/next-point-update.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -37132,11 +37132,13 @@ CVE-2020-11078 (In httplib2 before version 0.18.0, an attacker controlling unesc
 	NOTE: https://github.com/httplib2/httplib2/commit/a1457cc31f3206cf691d11d2bf34e98865873e9e
 CVE-2020-11077 (In Puma (RubyGem) before 4.3.5 and 3.12.6, a client could smuggle a re ...)
 	{DLA-2398-1}
-	- puma <unfixed> (bug #972102)
+	- puma 4.3.6-1 (bug #972102)
+	[buster] - puma <no-dsa> (Minor issue)
 	NOTE: https://github.com/puma/puma/security/advisories/GHSA-w64w-qqph-5gxm
 CVE-2020-11076 (In Puma (RubyGem) before 4.3.4 and 3.12.5, an attacker could smuggle a ...)
 	{DLA-2398-1}
-	- puma <unfixed> (bug #972102)
+	- puma 4.3.6-1 (bug #972102)
+	[buster] - puma <no-dsa> (Minor issue)
 	NOTE: https://github.com/puma/puma/security/advisories/GHSA-x7jg-6pwg-fx5h
 	NOTE: https://github.com/puma/puma/commit/f24d5521295a2152c286abb0a45a1e1e2bd275bd
 CVE-2020-11075 (In Anchore Engine version 0.7.0, a specially crafted container image m ...)


=====================================
data/next-point-update.txt
=====================================
@@ -66,3 +66,11 @@ CVE-2019-2201
 	[buster] - libjpeg-turbo 1:1.5.2-2+deb10u1
 CVE-2020-13790
 	[buster] - libjpeg-turbo 1:1.5.2-2+deb10u1
+CVE-2020-5247
+	[buster] - puma 3.12.0-2+deb10u2
+CVE-2020-5249
+	[buster] - puma 3.12.0-2+deb10u2
+CVE-2020-11076
+	[buster] - puma 3.12.0-2+deb10u2
+CVE-2020-11077
+	[buster] - puma 3.12.0-2+deb10u2



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/303de702fd579be4f7b7aa7912aa952ef5fbe991

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/303de702fd579be4f7b7aa7912aa952ef5fbe991
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20201016/259877e0/attachment.html>