[Secure-testing-commits] r38396 - data/CVE

Raphaël Hertzog hertzog at moszumanska.debian.org
Thu Dec 17 20:49:54 UTC 2015


Author: hertzog
Date: 2015-12-17 20:49:54 +0000 (Thu, 17 Dec 2015)
New Revision: 38396

Modified:
   data/CVE/list
Log:
Mark CVE-2015-7551 as not affectinq ruby1.9.1 on squeeze

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-12-17 19:58:00 UTC (rev 38395)
+++ data/CVE/list	2015-12-17 20:49:54 UTC (rev 38396)
@@ -4391,6 +4391,7 @@
 	RESERVED
 	- ruby1.9.1 <removed>
 	[wheezy] - ruby1.9.1 <no-dsa> (Minor issue)
+	[squeeze] - ruby1.9.1 <not-affected> (DL already fixed with CVE-2009-5147, Fiddle does not have vulnerable code)
 	- ruby2.0 <removed>
 	- ruby2.1 <unfixed> (bug #796344)
 	[jessie] - ruby2.1 <no-dsa> (Minor issue)




More information about the Secure-testing-commits mailing list