Summary: | <dev-ruby/sinatra-{2.2.3,3.0.4}: reflected file download | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | John Helmert III <ajak> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | minor | CC: | ruby |
Priority: | Normal | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | https://github.com/sinatra/sinatra/security/advisories/GHSA-2x8x-jmrp-phxw | ||
Whiteboard: | B4 [noglsa] | ||
Package list: | Runtime testing required: | --- | |
Bug Depends on: | 884241 | ||
Bug Blocks: |
Description
John Helmert III
![]() ![]() ![]() ![]() The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=ceb938c24ffb8a569b4ce0c42849d3f255fb296e commit ceb938c24ffb8a569b4ce0c42849d3f255fb296e Author: Hans de Graaff <graaff@gentoo.org> AuthorDate: 2022-12-03 11:01:22 +0000 Commit: Hans de Graaff <graaff@gentoo.org> CommitDate: 2022-12-03 11:03:57 +0000 dev-ruby/sinatra: add 2.2.3, 3.0.4 Bug: https://bugs.gentoo.org/883679 Signed-off-by: Hans de Graaff <graaff@gentoo.org> dev-ruby/sinatra/Manifest | 2 ++ dev-ruby/sinatra/sinatra-2.2.3.ebuild | 34 ++++++++++++++++++++++++++++++++++ dev-ruby/sinatra/sinatra-3.0.4.ebuild | 34 ++++++++++++++++++++++++++++++++++ 3 files changed, 70 insertions(+) Please stabilize when ready. No GLSA, seems a bit esoteric to exploit and seemingly low impact anyway. Please cleanup. commit 440dcec01b4d61d587f64672d20c0514d866e75e Author: Hans de Graaff <graaff@gentoo.org> Date: Tue Jun 13 12:03:25 2023 +0200 dev-ruby/sinatra: drop 3.0.2, 3.0.4 |