[Git][security-tracker-team/security-tracker][master] Add CVE-2021-4188/mruby

Salvatore Bonaccorso (@carnil) carnil at debian.org
Thu Dec 30 10:46:35 GMT 2021



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
311107c9 by Salvatore Bonaccorso at 2021-12-30T11:46:17+01:00
Add CVE-2021-4188/mruby

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -191,7 +191,9 @@ CVE-2021-45915
 CVE-2021-45914
 	RESERVED
 CVE-2021-4188 (mruby is vulnerable to NULL Pointer Dereference ...)
-	TODO: check
+	- mruby <not-affected> (Vulnerable code introduced later)
+	NOTE: https://huntr.dev/bounties/78533fb9-f3e0-47c2-86dc-d1f96d5bea28
+	NOTE: Fixed by: https://github.com/mruby/mruby/commit/27d1e0132a0804581dca28df042e7047fd27eaa8
 CVE-2021-45913
 	RESERVED
 CVE-2021-45912



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/311107c9e619dfa05a9275e365c6dea399bb5455

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/311107c9e619dfa05a9275e365c6dea399bb5455
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20211230/aa8c0314/attachment.htm>


More information about the debian-security-tracker-commits mailing list