[Secure-testing-commits] r35775 - data/CVE
Salvatore Bonaccorso
carnil at moszumanska.debian.org
Wed Jul 29 16:37:44 UTC 2015
Author: carnil
Date: 2015-07-29 16:37:44 +0000 (Wed, 29 Jul 2015)
New Revision: 35775
Modified:
data/CVE/list
Log:
Add fixed version for CVE-2015-3225/ruby-rack
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2015-07-29 14:41:26 UTC (rev 35774)
+++ data/CVE/list 2015-07-29 16:37:44 UTC (rev 35775)
@@ -6390,7 +6390,7 @@
[wheezy] - ruby-activesupport-2.3 <end-of-life> (https://lists.debian.org/debian-security-announce/2014/msg00164.html)
CVE-2015-3225 (lib/rack/utils.rb in Rack before 1.5.4 and 1.6.x before 1.6.2, as used ...)
{DLA-254-1}
- - ruby-rack <unfixed> (bug #789311)
+ - ruby-rack 1.5.2-4 (bug #789311)
- ruby-rack1.4 <removed>
- librack-ruby <removed>
NOTE: http://seclists.org/oss-sec/2015/q2/729 has patches for 1.5 and 1.6
More information about the Secure-testing-commits
mailing list