[Git][security-tracker-team/security-tracker][master] CVE-2024-21510/ruby-sinatra: Link to WIP upstream fix

[Adrian Bunk (@bunk)]

Adrian Bunk pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ab420d19 by Adrian Bunk at 2024-11-11T22:28:43+02:00
CVE-2024-21510/ruby-sinatra: Link to WIP upstream fix

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2811,6 +2811,7 @@ CVE-2024-21510 (Versions of the package sinatra from 0.0.0 are vulnerable to Rel
 	- ruby-sinatra <unfixed> (bug #1087290)
 	NOTE: https://security.snyk.io/vuln/SNYK-RUBY-SINATRA-6483832
 	NOTE: https://github.com/sinatra/sinatra/pull/2010
+	NOTE: WIP upstream fix: https://github.com/sinatra/sinatra/pull/2053
 CVE-2024-10620 (A vulnerability was found in knightliao Disconf 2.6.36. It has been cl ...)
 	NOT-FOR-US: knightliao Disconf
 CVE-2024-10619 (A vulnerability, which was classified as critical, was found in Tongda ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ab420d19505552783fbd2547f7b291f6962015a8

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ab420d19505552783fbd2547f7b291f6962015a8
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20241111/75292fde/attachment.htm>