Commit fbd3e2ac authored by Salvatore Bonaccorso's avatar Salvatore Bonaccorso
Browse files

Add Debian bug reference for CVE-2019-5477/ruby-nokogiri

parent 125e2cb5
Loading
Loading
Loading
Loading
+1 −1
Original line number Diff line number Diff line
@@ -27062,7 +27062,7 @@ CVE-2019-5478
	RESERVED
CVE-2019-5477 [Command Injection Vulnerability]
	RESERVED
	- ruby-nokogiri <unfixed>
	- ruby-nokogiri <unfixed> (bug #934802)
	NOTE: https://github.com/sparklemotion/nokogiri/issues/1915
	NOTE: Processes are vulnerable only if the undocumented method Nokogiri::CSS::Tokenizer#load_file
	NOTE: is being passed untrusted user input.