[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2024-26144/rails

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0eb74424 by Salvatore Bonaccorso at 2024-02-29T23:06:33+01:00
Add Debian bug reference for CVE-2024-26144/rails

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1524,7 +1524,7 @@ CVE-2021-46907 (In the Linux kernel, the following vulnerability has been resolv
 	[buster] - linux <not-affected> (Vulnerable code not present)
 	NOTE: https://git.kernel.org/linus/04c4f2ee3f68c9a4bf1653d15f1a9a435ae33f7a (5.12-rc8)
 CVE-2024-26144 (Rails is a web-application framework. Starting with version 5.2.0, the ...)
-	- rails <unfixed>
+	- rails <unfixed> (bug #1065119)
 	NOTE: https://discuss.rubyonrails.org/t/possible-sensitive-session-information-leak-in-active-storage/84945
 CVE-2024-27092 (Hoppscotch is an API development ecosystem.  Due to lack of validation ...)
 	NOT-FOR-US: Hoppscotch



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0eb74424b75f87a3de83d4d920209df6aaf8b120

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0eb74424b75f87a3de83d4d920209df6aaf8b120
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240229/5122314c/attachment.htm>