[Git][security-tracker-team/security-tracker][master] new ruby-sidekiq issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8e1c309c by Moritz Muehlenhoff at 2024-04-27T20:35:34+02:00
new ruby-sidekiq issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -19,7 +19,9 @@ CVE-2024-3051 (Malformed Device Reset Locally command classes can be sent to tem
 CVE-2024-3034 (The BackUpWordPress plugin for WordPress is vulnerable to Directory Tr ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2024-32887 (Sidekiq is simple, efficient background processing for Ruby. Sidekiq i ...)
-	TODO: check
+	- ruby-sidekiq <unfixed>
+	NOTE: https://github.com/sidekiq/sidekiq/commit/30786e082c70349ab27ffa9eccc42fb0c696164d (v7.2.4)
+	NOTE: https://github.com/sidekiq/sidekiq/security/advisories/GHSA-q655-3pj8-9fxq
 CVE-2024-32883 (MCUboot is a secure bootloader for 32-bits microcontrollers. MCUboot u ...)
 	NOT-FOR-US: mcuboot
 CVE-2024-32881 (Danswer is the AI Assistant connected to company's docs, apps, and peo ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8e1c309c51ee60f3504ea4aeae9fadf457400395

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8e1c309c51ee60f3504ea4aeae9fadf457400395
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240427/585a5447/attachment.htm>