New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add CVE-2019-15224 for rest-client. #405

Merged

reedloden merged 1 commit into rubysec:master from sho-h:add-cve-2019-15224

Aug 20, 2019

Contributor

sho-h commented Aug 20, 2019 •

edited

I added rest-client/CVE-2019-15224.yml. Only 1.6.13 was written in https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15224.
but yanked version in
https://rubygems.org/gems/rest-client/versions is below.

1.6.13 - August 14, 2019 (114KB) yanked
1.6.12 - August 14, 2019 (113KB) yanked
1.6.11 - August 14, 2019 (113KB) yanked
1.6.10 - August 13, 2019 (11.5KB) yanked

So I was set unaffected version to ...1.6.9 and 1.7.0.rc1... .
If 1.6.10 - 1.6.12 was not affected, I will change unaffected version.

see. rest-client/rest-client#713


          Add CVE-2019-15224 for rest-client.

0e62b3d

reedloden merged commit ddf5890 into rubysec:master

sho-h deleted the add-cve-2019-15224 branch

August 20, 2019 07:55

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment