[Git][security-tracker-team/security-tracker][master] 2 commits: Adjust commit for the ruby repository for CVE-2021-31799

Salvatore Bonaccorso (@carnil) carnil at debian.org
Thu Jul 8 13:28:04 BST 2021



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8afcdb2b by Salvatore Bonaccorso at 2021-07-08T14:24:54+02:00
Adjust commit for the ruby repository for CVE-2021-31799

- - - - -
609fbb38 by Salvatore Bonaccorso at 2021-07-08T14:27:25+02:00
CVE-2021-31799: Add tag information for rdoc "upstream"

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -10353,8 +10353,10 @@ CVE-2021-31799 [A command injection vulnerability in RDoc]
 	- ruby2.7 <unfixed>
 	- ruby2.5 <removed>
 	- ruby2.3 <removed>
+	NOTE: Introduced in (rdoc): https://github.com/ruby/rdoc/commit/4a8b7bed7cd5647db92c620bc6f33e4c309d2212 (v3.11)
+	NOTE: Fixed in (rdoc): https://github.com/ruby/rdoc/commit/a7f5d6ab88632b3b482fe10611382ff73d14eed7 (v6.3.1)
 	NOTE: https://www.ruby-lang.org/en/news/2021/05/02/os-command-injection-in-rdoc/
-	NOTE: https://github.com/ruby/rdoc/commit/b1c73f239fe9af97de837331849f55d67c27561e (master)
+	NOTE: https://github.com/ruby/ruby/commit/b1c73f239fe9af97de837331849f55d67c27561e (master)
 	NOTE: https://github.com/ruby/ruby/commit/483f303d02e768b69e476e0b9be4ab2f26389522 (2.7)
 CVE-2021-31798
 	RESERVED



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/9410f59b9984680be7c915a2f8da0873b50d2b2f...609fbb3893fe4c8e2143aedc7d030de531f95c14

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/9410f59b9984680be7c915a2f8da0873b50d2b2f...609fbb3893fe4c8e2143aedc7d030de531f95c14
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210708/96c81d4a/attachment.htm>


More information about the debian-security-tracker-commits mailing list