Mike Gabriel pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
8ccf2d71 by Mike Gabriel at 2018-07-17T19:33:46+02:00
data/CVE/list: Add commit that fixes CVE-2018-1000544 (ruby-zip).
- - - - -
9401f123 by Mike Gabriel at 2018-07-17T19:34:20+02:00
Add ruby-zip to dla-needed.txt.
- - - - -
2 changed files:
- data/CVE/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -3796,6 +3796,7 @@ CVE-2018-1000545
CVE-2018-1000544 (rubyzip gem rubyzip version 1.2.1 and earlier contains a
Directory ...)
- ruby-zip <unfixed> (bug #902720)
NOTE: https://github.com/rubyzip/rubyzip/issues/369
+ NOTE:
https://github.com/rubyzip/rubyzip/commit/ce4208fdecc2ad079b05d3c49d70fe6ed1d07016
CVE-2018-1000543 (Akiee version 0.0.3 contains a XSS leading to code execution
due to ...)
NOT-FOR-US: Akiee
CVE-2018-1000542 (netbeans-mmd-plugin version <= 1.4.3 contains a XML
External Entity ...)
=====================================
data/dla-needed.txt
=====================================
--- a/data/dla-needed.txt
+++ b/data/dla-needed.txt
@@ -111,6 +111,8 @@ resiprocate
--
ruby2.1
--
+ruby-zip
+--
slurm-llnl (Thorsten Alteholz)
NOTE: 20180630: test package uploaded to
https://people.debian.org/~alteholz/packages/jessie-lts/slurm-llnl/
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/compare/ebc66f79026e623c894cbce02ac99725e3b66733...9401f1235a2261c82f9d0684e2ce1969042b2af3
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/compare/ebc66f79026e623c894cbce02ac99725e3b66733...9401f1235a2261c82f9d0684e2ce1969042b2af3
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
