Author: anarcat
Date: 2017-09-26 18:23:59 +0000 (Tue, 26 Sep 2017)
New Revision: 56162
Modified:
data/CVE/list
Log:
ruby 1.8 not affected by CVE-2017-14033: test does not fail
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2017-09-26 18:22:10 UTC (rev 56161)
+++ data/CVE/list 2017-09-26 18:23:59 UTC (rev 56162)
@@ -1972,7 +1972,7 @@
- ruby2.3 <unfixed> (bug #875928)
- ruby2.1 <removed>
- ruby1.9.1 <removed>
- - ruby1.8 <removed>
+ - ruby1.8 <not-affected> (vunlerable code not present)
NOTE: https://bugzilla.novell.com/show_bug.cgi?id=1058757
NOTE:
https://www.ruby-lang.org/en/news/2017/09/14/openssl-asn1-buffer-underrun-cve-2017-14033/
NOTE:
https://github.com/ruby/openssl/commit/1648afef33c1d97fb203c82291b8a61269e85d3b
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
