[Git][security-tracker-team/security-tracker][master] Add postponed/bullseye note for rubyrack CVE-2025-27111

[Bastien Roucariès (@rouca)]

Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker


Commits:
3eeae3e2 by Bastien Roucariès at 2025-03-04T21:51:31+00:00
Add postponed/bullseye note for rubyrack CVE-2025-27111

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -18,6 +18,7 @@ CVE-2025-27150 (Tuleap is an Open Source Suite to improve management of software
 	NOT-FOR-US: Tuleap
 CVE-2025-27111 (Rack is a modular Ruby web server interface. The Rack::Sendfile middle ...)
 	- ruby-rack <unfixed> (bug #1099546)
+	[bullseye] - ruby-rack <postponed> (Minor issue, log injection)
 	NOTE: https://github.com/rack/rack/security/advisories/GHSA-8cgq-6mh2-7j6v
 	NOTE: Fixed by: https://github.com/rack/rack/commit/b13bc6bfc7506aca3478dc5ac1c2ec6fc53f82a3 (v2.2.12)
 	NOTE: Fixed by: https://github.com/rack/rack/commit/803aa221e8302719715e224f4476e438f2531a53 (v3.0.13)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3eeae3e22b5c624f56a732d7f68766dfd8864200

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3eeae3e22b5c624f56a732d7f68766dfd8864200
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250304/5a314ad2/attachment-0001.htm>