[Secure-testing-commits] r25706 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2014-02-12 22:04:00 +0000 (Wed, 12 Feb 2014)
New Revision: 25706

Modified:
   data/CVE/list
Log:
Update version information about CVE-2013-2065

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-02-12 21:44:46 UTC (rev 25705)
+++ data/CVE/list	2014-02-12 22:04:00 UTC (rev 25706)
@@ -17503,9 +17503,8 @@
 	{DSA-2674-1}
 	- libxv 2:1.0.7-1+deb7u1
 CVE-2013-2065 ((1) DL and (2) Fiddle in Ruby 1.9 before 1.9.3 patchlevel 426, and 2.0 ...)
-	- ruby1.9.1 1.9.3.484-2
+	- ruby1.9.1 1.9.3.448-1
 	- ruby1.8 <not-affected> (Only affects 1.9 and 2.x)
-	NOTE: I checked 1.9.3.484-2, but https://www.ruby-lang.org/en/news/2013/05/14/taint-bypass-dl-fiddle-cve-2013-2065/ says it should be closed since 1.9.3 patchlevel 426
 CVE-2013-2064 (Integer overflow in X.org libxcb 1.9 and earlier allows X servers to ...)
 	{DSA-2686-1}
 	- libxcb 1.8.1-2+deb7u1