Brian May pushed to branch master at Debian Security Tracker / security-tracker
Commits: 88592a57 by Brian May at 2018-04-12T16:39:03+10:00 Mark rubygems as minor in wheezy Considered not worth fixing. See the following threads on debian-lts: * https://lists.debian.org/debian-lts/2018/04/msg00015.html * https://lists.debian.org/debian-lts/2018/04/msg00042.html - - - - - 2 changed files: - data/CVE/list - data/dla-needed.txt Changes: ===================================== data/CVE/list ===================================== --- a/data/CVE/list +++ b/data/CVE/list @@ -7037,6 +7037,7 @@ CVE-2018-1000074 (RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 - ruby2.1 <removed> - ruby1.9.1 <removed> - rubygems <removed> + [wheezy] - rubygems <no-dsa> (Minor issue) - jruby <unfixed> NOTE: https://github.com/rubygems/rubygems/commit/254e3d0ee873c008c0b74e8b8abcbdab4caa0a6d NOTE: https://www.ruby-lang.org/en/news/2018/02/17/multiple-vulnerabilities-in-rubygems/ ===================================== data/dla-needed.txt ===================================== --- a/data/dla-needed.txt +++ b/data/dla-needed.txt @@ -83,10 +83,6 @@ qemu-kvm ruby1.9.1 (Santiago R.R.) NOTE: 20180402: Also vulnerable to CVE-2018-1000074. (lamby) -- -rubygems - NOTE: See https://lists.debian.org/debian-lts/2018/04/msg00015.html - NOTE: See https://lists.debian.org/debian-lts/2018/04/msg00042.html --- sharutils (Abhijith PA) NOTE: 20180318: no patch available yet, so no email to maintainer sent -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/88592a572dcd21aabff91448e8117c0548161a2e --- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/88592a572dcd21aabff91448e8117c0548161a2e You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ Secure-testing-commits mailing list Secure-testing-commits@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
