[Secure-testing-commits] r35324 - in data: . CVE

[Thorsten Alteholz]

Author: alteholz
Date: 2015-07-05 09:23:09 +0000 (Sun, 05 Jul 2015)
New Revision: 35324

Modified:
   data/CVE/list
   data/dla-needed.txt
Log:
rails is EOL in squeeze

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-07-05 09:10:17 UTC (rev 35323)
+++ data/CVE/list	2015-07-05 09:23:09 UTC (rev 35324)
@@ -5294,6 +5294,7 @@
 CVE-2015-3227 [Denial of Service]
 	RESERVED
 	- rails <unfixed> (bug #790487)
+	[squeeze] - rails <end-of-life> (Unsupported in squeeze-lts)
 	[wheezy] - rails <not-affected> (Vulnerable code not present, is only a transitional package)
 	- ruby-activesupport-3.2 <removed>
 	- ruby-activesupport-2.3 <removed>
@@ -5301,6 +5302,7 @@
 CVE-2015-3226 [XSS Vulnerability in ActiveSupport::JSON.encode]
 	RESERVED
 	- rails <unfixed> (bug #790486)
+	[squeeze] - rails <end-of-life> (Unsupported in squeeze-lts)
 	[wheezy] - rails <not-affected> (Vulnerable code not present, is only a transitional package)
 	- ruby-activesupport-3.2 <removed>
 	- ruby-activesupport-2.3 <removed>

Modified: data/dla-needed.txt
===================================================================
--- data/dla-needed.txt	2015-07-05 09:10:17 UTC (rev 35323)
+++ data/dla-needed.txt	2015-07-05 09:23:09 UTC (rev 35324)
@@ -39,8 +39,6 @@
 --
 pound (Guido Günther)
 --
-rails
---
 roundup (Thorsten Alteholz)
 --
 virtualbox-ose (Mike Gabriel)