[Git][security-tracker-team/security-tracker][master] Add two ruby-sqlite3 issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
92d58dbb by Salvatore Bonaccorso at 2026-07-29T07:13:43+02:00
Add two ruby-sqlite3 issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -160,9 +160,15 @@ CVE-2026-55977 (Successful exploitation of this vulnerability could allow an att
 CVE-2026-54635 (pytonapi is a Python SDK for TONAPI that provides REST API, streaming, ...)
 	NOT-FOR-US: pytonapi
 CVE-2026-54620 (sqlite3 provides Ruby bindings for the SQLite3 embedded database. From ...)
-	TODO: check
+	- ruby-sqlite3 2.9.5-1
+	NOTE: https://github.com/sparklemotion/sqlite3-ruby/security/advisories/GHSA-j7fr-3v8c-3qc3
+	NOTE: https://github.com/sparklemotion/sqlite3-ruby/pull/711
+	NOTE: Fixed by: https://github.com/sparklemotion/sqlite3-ruby/commit/b24e1e6076528b7f95f99acf7a81c70d0004c726 (v2.9.5)
 CVE-2026-54619 (sqlite3 provides Ruby bindings for the SQLite3 embedded database. In v ...)
-	TODO: check
+	- ruby-sqlite3 2.9.5-1
+	NOTE: https://github.com/sparklemotion/sqlite3-ruby/security/advisories/GHSA-28hh-pr2h-2w89
+	NOTE: https://github.com/sparklemotion/sqlite3-ruby/pull/710
+	NOTE: Fixed by: https://github.com/sparklemotion/sqlite3-ruby/commit/2bd436d17f77cdd4c31b00fe9d50b0d21cbaf033 (v2.9.5)
 CVE-2026-54609 (QTI Neon is a minimal, game-agnostic, relay-based UDP multiplayer prot ...)
 	NOT-FOR-US: QTI Neon
 CVE-2026-54605 (OAuth is a Ruby wrapper for the OAuth 1.0 and 1.0a protocols, providin ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/92d58dbb83401a9d6b7c5cf6d32b6363c1549d13

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/92d58dbb83401a9d6b7c5cf6d32b6363c1549d13
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260729/9b8f4315/attachment.htm>