[Git][security-tracker-team/security-tracker][master] Add upstream commit references for CVE-2025-27610
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Tue Mar 11 18:08:16 GMT 2025
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
0da1640c by Salvatore Bonaccorso at 2025-03-11T19:08:04+01:00
Add upstream commit references for CVE-2025-27610
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -55,7 +55,10 @@ CVE-2025-27910 (tianti v2.3 was discovered to contain a Cross-Site Request Forge
CVE-2025-27610 (Rack provides an interface for developing web applications in Ruby. Pr ...)
- ruby-rack <unfixed>
NOTE: https://github.com/rack/rack/security/advisories/GHSA-7wqh-767x-r66v
- NOTE: https://github.com/rack/rack/commit/50caab74fa01ee8f5dbdee7bb2782126d20c6583
+ NOTE: Fixed by: https://github.com/rack/rack/commit/50caab74fa01ee8f5dbdee7bb2782126d20c6583 (main)
+ NOTE: Fixed by: https://github.com/rack/rack/commit/70cb3228c755c2d066c108a9c59fbe67aff8e889 (v3.1.12)
+ NOTE: Fixed by: https://github.com/rack/rack/commit/61f83f6336d3e59d1fa694c354c1ff17e80cefad (v3.0.14)
+ NOTE: Fixed by: https://github.com/rack/rack/commit/873d39e6d673a91fbdeb2ec75d42184d35908bb4 (v2.2.13)
CVE-2025-27436 (The Manage Bank Statements in SAP S/4HANA does not perform required ac ...)
NOT-FOR-US: SAP
CVE-2025-27434 (Due to insufficient input validation, SAP Commerce (Swagger UI) allows ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0da1640cb65ec79f769f6789e9311f8c3c0e5654
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0da1640cb65ec79f769f6789e9311f8c3c0e5654
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250311/1c65d353/attachment.htm>
More information about the debian-security-tracker-commits
mailing list