[Secure-testing-commits] r21072 - data/CVE

Salvatore Bonaccorso carnil at alioth.debian.org
Tue Jan 29 14:56:02 UTC 2013


Author: carnil
Date: 2013-01-29 14:56:02 +0000 (Tue, 29 Jan 2013)
New Revision: 21072

Modified:
   data/CVE/list
Log:
add info that CVE-2013-0333 also affects ruby-activesupport-2.3

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-01-29 13:40:45 UTC (rev 21071)
+++ data/CVE/list	2013-01-29 14:56:02 UTC (rev 21072)
@@ -2747,6 +2747,7 @@
 CVE-2013-0333 [Vulnerability in JSON Parser in Ruby on Rails 3.0 and 2.3]
 	RESERVED
 	- rails <unfixed> (bug #699226)
+	- ruby-activesupport-2.3 <unfixed> (bug #699249)
 	NOTE: https://groups.google.com/forum/?fromgroups=#!topic/rubyonrails-security/1h2DR63ViGo
 	TODO: check
 CVE-2013-0332




More information about the Secure-testing-commits mailing list