[Secure-testing-commits] r36012 - in data: . CVE

[Guido Guenther]

Author: agx
Date: 2015-08-12 12:54:57 +0000 (Wed, 12 Aug 2015)
New Revision: 36012

Modified:
   data/CVE/list
   data/dla-needed.txt
Log:
Add ruby{1.8,1.9.1} to DLA needed

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-08-12 12:52:16 UTC (rev 36011)
+++ data/CVE/list	2015-08-12 12:54:57 UTC (rev 36012)
@@ -10216,6 +10216,7 @@
 	NOTE: seem to be contained in e.g. latest 1.9.1 and 2.2. E.g.
 	NOTE: https://sources.debian.net/src/ruby2.1/2.1.5-4/ext/dl/handle.c/#L120 does
 	NOTE: contain the change.
+	NOTE: Discussion http://seclists.org/oss-sec/2015/q3/220
 	TODO: check
 CVE-2009-5146 [memory leak in hostname TLS extension]
 	RESERVED

Modified: data/dla-needed.txt
===================================================================
--- data/dla-needed.txt	2015-08-12 12:52:16 UTC (rev 36011)
+++ data/dla-needed.txt	2015-08-12 12:54:57 UTC (rev 36012)
@@ -50,6 +50,10 @@
 --
 roundup (Thorsten Alteholz)
 --
+ruby1.8
+--
+ruby1.9.1
+--
 squid
 --
 subversion