[Git][security-tracker-team/security-tracker][master] Add CVE-2020-36599/ruby-omniauth

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a61b74b7 by Salvatore Bonaccorso at 2022-08-19T10:23:50+02:00
Add CVE-2020-36599/ruby-omniauth

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -149,7 +149,9 @@ CVE-2022-2892
 CVE-2021-46834
 	RESERVED
 CVE-2020-36599 (lib/omniauth/failure_endpoint.rb in OmniAuth before 2.0 does not escap ...)
-	TODO: check
+	[experimental] - ruby-omniauth 2.0.4-1~exp1
+	- ruby-omniauth <unfixed>
+	NOTE: https://github.com/omniauth/omniauth/commit/43a396f181ef7d0ed2ec8291c939c95e3ed3ff00#diff-575abda9deb9b1a77bf534e898a923029b9a61e991d626db88dc6e8b34260aa2 (v2.0.0-rc1)
 CVE-2020-36598
 	RESERVED
 CVE-2020-36597



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a61b74b7758fde39a556de9ed80572401a061093

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a61b74b7758fde39a556de9ed80572401a061093
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220819/ce2fc1f5/attachment.htm>