Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
1da552c6 by Salvatore Bonaccorso at 2019-03-29T20:06:04Z
Add further Debian bug reference for CVE-2018-1000073/jruby
This one issue was not closed while adressing #895778 which was
collecting multiple CVEs, whilst it was corrected in the DSA covered by
DSA-4219-1 itself and adressed in 1.7.26-1+deb9u1 in stable.
New bug was filled to cover this CVE specifically.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -59601,7 +59601,7 @@ CVE-2018-1000073 (RubyGems version Ruby 2.2 series:
2.2.9 and earlier, Ruby 2.3
[wheezy] - ruby1.9.1 <not-affected> (Vulnerable code not present)
- rubygems <removed>
[wheezy] - rubygems <not-affected> (Vulnerable code not present)
- - jruby <unfixed> (bug #895778)
+ - jruby <unfixed> (bug #895778; bug #925986)
[jessie] - jruby <not-affected> (Vulnerable code not present)
[wheezy] - jruby <not-affected> (Vulnerable code not present)
NOTE:
https://github.com/rubygems/rubygems/commit/1b931fc03b819b9a0214be3eaca844ef534175e2
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/1da552c6b4234f0d114eb628b0f68f91ea63c0a0
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/1da552c6b4234f0d114eb628b0f68f91ea63c0a0
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
