[Git][security-tracker-team/security-tracker][master] Update information for CVE-2023-22794/rails

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d4a80297 by Salvatore Bonaccorso at 2023-01-27T21:21:17+01:00
Update information for CVE-2023-22794/rails

Drop (for now) the not-affected annoatation, as bullseye has
2:6.0.3.7+dfsg-2. The issue should affect all versions after 6.0.0.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -5241,7 +5241,6 @@ CVE-2023-22795
 CVE-2023-22794
 	RESERVED
 	- rails <unfixed>
-	[bullseye] - rails <not-affected> (Only affects 6.x and later)
 	[buster] - rails <not-affected> (Only affects 6.x and later)
 	NOTE: https://discuss.rubyonrails.org/t/cve-2023-22794-sql-injection-vulnerability-via-activerecord-comments/82117
 	NOTE: https://github.com/rails/rails/commit/048e9fc05e18c91838a44e60175e475de8b2aad5 (6-1-stable)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d4a802976d9cda47533edfd1b679f8aa23a33995

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d4a802976d9cda47533edfd1b679f8aa23a33995
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230127/eabfc856/attachment-0001.htm>