[Git][security-tracker-team/security-tracker][master] Reference as well upstream followup fixes for CVE-2024-27285

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d9029a38 by Salvatore Bonaccorso at 2024-03-01T12:31:22+01:00
Reference as well upstream followup fixes for CVE-2024-27285

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -613,7 +613,10 @@ CVE-2024-27515 (Osclass 5.1.2 is vulnerable to SQL Injection.)
 CVE-2024-27285 (YARD is a Ruby Documentation tool. The "frames.html" file within the Y ...)
 	- yard 0.9.35-1 (bug #1065118)
 	NOTE: https://github.com/lsegal/yard/security/advisories/GHSA-8mq4-9jjh-9xrc
-	NOTE: https://github.com/lsegal/yard/commit/d78fc393d603c4fc35975969296ed381146a29d4 (v0.9.35)
+	NOTE: Fixed by: https://github.com/lsegal/yard/commit/d78fc393d603c4fc35975969296ed381146a29d4 (v0.9.35)
+	NOTE: Followup: https://github.com/lsegal/yard/commit/c88406e4b78f8dd4ba38c79eea0bcec716dbbef8 (v0.9.36)
+	NOTE: Followup: https://github.com/lsegal/yard/commit/2a0b9990b64ceeeb0456177c593e36e204a06df1 (v0.9.36)
+	NOTE: Followup: https://github.com/lsegal/yard/commit/a831a596b2a7cabdd2e17855dd179af2ebf3d559 (v0.9.36)
 CVE-2024-27284 (cassandra-rs is a Cassandra (CQL) driver for Rust. Code that attempts  ...)
 	NOT-FOR-US: Rust crate cassandra-rs
 CVE-2024-27103 (Querybook is a Big Data Querying UI. When a user searches for their qu ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d9029a3841e9350517edc52fddbf820215b4604a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d9029a3841e9350517edc52fddbf820215b4604a
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240301/94a7a14c/attachment.htm>