Author: hertzog
Date: 2014-12-12 14:32:10 +0000 (Fri, 12 Dec 2014)
New Revision: 30708
Modified:
data/CVE/list
Log:
Squeeze has librack-ruby and not ruby-rack
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2014-12-12 14:32:03 UTC (rev 30707)
+++ data/CVE/list 2014-12-12 14:32:10 UTC (rev 30708)
@@ -44838,7 +44838,7 @@
CVE-2012-6109 (lib/rack/multipart.rb in Rack before 1.1.4, 1.2.x before 1.2.6,
1.3.x ...)
- ruby-rack 1.4.1-2.1 (bug #698440)
- librack-ruby <removed>
- [squeeze] - ruby-rack <not-affected> (vulnerable code not present)
+ [squeeze] - librack-ruby <not-affected> (vulnerable code not present)
NOTE:
https://github.com/rack/rack/commit/4fc44671b3cad569421f4f8b775c0590b86f575e
NOTE:
https://groups.google.com/forum/#!msg/rack-devel/1w4_fWEgTdI/XAkSNHjtdTsJ
CVE-2012-6108 (HP Linux Imaging and Printing (HPLIP) before 3.13.2 uses ...)
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
