[Git][security-tracker-team/security-tracker][master] Update status for CVE-2024-43791/ruby-request-store

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5529f940 by Salvatore Bonaccorso at 2024-08-24T09:45:34+02:00
Update status for CVE-2024-43791/ruby-request-store

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -43,7 +43,8 @@ CVE-2024-44381 (D-Link DI_8004W 16.07.26A1 contains a command execution vulnerab
 CVE-2024-43794 (OpenSearch Dashboards Security Plugin adds a configuration management  ...)
 	NOT-FOR-US: OpenSearch Dashboards Security Plugin
 CVE-2024-43791 (RequestStore provides per-request global storage for Rack. The files p ...)
-	TODO: check
+	- ruby-request-store <not-affected> (Debian packaging not affected by the world-writable permissions on installed files)
+	NOTE: https://github.com/steveklabnik/request_store/security/advisories/GHSA-frp2-5qfc-7r8m
 CVE-2024-43782 (This openedx-translations repository contains translation files from O ...)
 	TODO: check
 CVE-2024-43032 (autMan v2.9.6 allows attackers to bypass authentication via a crafted  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5529f9409ddd664a2b684f5b3bfc200110ed28a0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5529f9409ddd664a2b684f5b3bfc200110ed28a0
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240824/31c799fb/attachment-0001.htm>