[Git][security-tracker-team/security-tracker][master] Add upstream commit references for CVE-2025-27610

Salvatore Bonaccorso (@carnil) carnil at debian.org
Tue Mar 11 18:08:16 GMT 2025



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0da1640c by Salvatore Bonaccorso at 2025-03-11T19:08:04+01:00
Add upstream commit references for CVE-2025-27610

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -55,7 +55,10 @@ CVE-2025-27910 (tianti v2.3 was discovered to contain a Cross-Site Request Forge
 CVE-2025-27610 (Rack provides an interface for developing web applications in Ruby. Pr ...)
 	- ruby-rack <unfixed>
 	NOTE: https://github.com/rack/rack/security/advisories/GHSA-7wqh-767x-r66v
-	NOTE: https://github.com/rack/rack/commit/50caab74fa01ee8f5dbdee7bb2782126d20c6583
+	NOTE: Fixed by: https://github.com/rack/rack/commit/50caab74fa01ee8f5dbdee7bb2782126d20c6583 (main)
+	NOTE: Fixed by: https://github.com/rack/rack/commit/70cb3228c755c2d066c108a9c59fbe67aff8e889 (v3.1.12)
+	NOTE: Fixed by: https://github.com/rack/rack/commit/61f83f6336d3e59d1fa694c354c1ff17e80cefad (v3.0.14)
+	NOTE: Fixed by: https://github.com/rack/rack/commit/873d39e6d673a91fbdeb2ec75d42184d35908bb4 (v2.2.13)
 CVE-2025-27436 (The Manage Bank Statements in SAP S/4HANA does not perform required ac ...)
 	NOT-FOR-US: SAP
 CVE-2025-27434 (Due to insufficient input validation, SAP Commerce (Swagger UI) allows ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0da1640cb65ec79f769f6789e9311f8c3c0e5654

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0da1640cb65ec79f769f6789e9311f8c3c0e5654
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250311/1c65d353/attachment.htm>


More information about the debian-security-tracker-commits mailing list