From 3ee10ccc63aea2bec8ac2b8c3e1f6b2acd58edad Mon Sep 17 00:00:00 2001 From: "Yukihiro \"Matz\" Matsumoto" Date: Tue, 10 May 2022 20:32:04 +0900 Subject: [PATCH] mruby3.1.md: update fixed CVE list. --- doc/mruby3.1.md | 35 +++++++++++++++++++++++++++++++++++ 1 file changed, 35 insertions(+) diff --git a/doc/mruby3.1.md b/doc/mruby3.1.md index 61c11803c..158b8ea7e 100644 --- a/doc/mruby3.1.md +++ b/doc/mruby3.1.md @@ -218,3 +218,38 @@ For better and faster hash values. - Fix keyword parameters not passing through super [#5660](https://github.com/mruby/mruby/issues/5660) - Fix infinite loop from unclosed here-doc [#5676](https://github.com/mruby/mruby/issues/5676) - Fix negative integer division bug [#5678](https://github.com/mruby/mruby/issues/5678) + +# CVEs + +## Fixed CVEs + +Following CVEs are fixed in this release. + +- [CVE-2021-4110](https://nvd.nist.gov/vuln/detail/CVE-2021-4110) +- [CVE-2021-4188](https://nvd.nist.gov/vuln/detail/CVE-2021-4188) +- [CVE-2022-0080](https://nvd.nist.gov/vuln/detail/CVE-2022-0080) +- [CVE-2022-0240](https://nvd.nist.gov/vuln/detail/CVE-2022-0240) +- [CVE-2022-0326](https://nvd.nist.gov/vuln/detail/CVE-2022-0326) +- [CVE-2022-0481](https://nvd.nist.gov/vuln/detail/CVE-2022-0481) +- [CVE-2022-0631](https://nvd.nist.gov/vuln/detail/CVE-2022-0631) +- [CVE-2022-0632](https://nvd.nist.gov/vuln/detail/CVE-2022-0632) +- [CVE-2022-0890](https://nvd.nist.gov/vuln/detail/CVE-2022-0890) +- [CVE-2022-1071](https://nvd.nist.gov/vuln/detail/CVE-2022-1071) +- [CVE-2022-1106](https://nvd.nist.gov/vuln/detail/CVE-2022-1106) +- [CVE-2022-1201](https://nvd.nist.gov/vuln/detail/CVE-2022-1201) +- [CVE-2022-1427](https://nvd.nist.gov/vuln/detail/CVE-2022-1427) + +## Unaffected CVEs + +Following CVEs do not cause problems in this release. They are fixed in the later release. + +- [CVE-2022-0481](https://nvd.nist.gov/vuln/detail/CVE-2022-0481) +- [CVE-2022-0525](https://nvd.nist.gov/vuln/detail/CVE-2022-0525) +- [CVE-2022-0570](https://nvd.nist.gov/vuln/detail/CVE-2022-0570) +- [CVE-2022-0614](https://nvd.nist.gov/vuln/detail/CVE-2022-0614) +- [CVE-2022-0623](https://nvd.nist.gov/vuln/detail/CVE-2022-0623) +- [CVE-2022-0630](https://nvd.nist.gov/vuln/detail/CVE-2022-0630) +- [CVE-2022-0717](https://nvd.nist.gov/vuln/detail/CVE-2022-0817) +- [CVE-2022-1212](https://nvd.nist.gov/vuln/detail/CVE-2022-1212) +- [CVE-2022-1276](https://nvd.nist.gov/vuln/detail/CVE-2022-1276) +- [CVE-2022-1286](https://nvd.nist.gov/vuln/detail/CVE-2022-1286)