[Git][security-tracker-team/security-tracker][master] new issue in uri gem

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
77b705d3 by Moritz Muehlenhoff at 2025-03-04T11:52:05+01:00
new issue in uri gem

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,7 +1,14 @@
 CVE-2025-27521 (Vulnerability of improper access permission in the process management  ...)
 	TODO: check
 CVE-2025-27221 (In the URI gem before 1.0.3 for Ruby, the URI handling methods (URI.jo ...)
-	TODO: check
+	- ruby3.3 <unfixed>
+	- ruby3.1 <unfixed>
+	- ruby2.7 <removed>
+	- rubygems <unfixed>
+	NOTE: https://github.com/ruby/uri/commit/3675494839112b64d5f082a9068237b277ed1495 (v1.0.3)
+	NOTE: https://github.com/ruby/uri/commit/2789182478f42ccbb62197f952eb730e4f02bfc5 (v1.0.3)
+	NOTE: https://github.com/ruby/uri/pull/154
+	NOTE: https://github.com/rubysec/ruby-advisory-db/blob/master/gems/uri/CVE-2025-27221.yml
 CVE-2025-27220 (In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of S ...)
 	TODO: check
 CVE-2025-27219 (In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/77b705d3b134101307273c2d3524b62514cdbe3b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/77b705d3b134101307273c2d3524b62514cdbe3b
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250304/67d41709/attachment.htm>