TEMP-0000000-23C1BD

Источник: debian

Описание

[Sidekiq::Web lacks CSRF protection]

Пакет	Статус	Версия исправления	Релиз	Тип
ruby-sidekiq	fixed	3.4.2~dfsg-3		package
ruby-sidekiq	no-dsa		jessie	package

https://github.com/mperham/sidekiq/pull/2422
Fixed by https://github.com/mperham/sidekiq/commit/cf3c43b2410c4573e05ac119494e41115f4140ad
Fix released in sidekiq 3.4.2
Follow-up fix: https://github.com/mperham/sidekiq/commit/75a3524c919857aac16e0541b0cb107f48d00694
Follow-up commit not included in 3.4.2~dfsg-1
CVE Request: https://www.openwall.com/lists/oss-security/2015/08/01/2