[Secure-testing-commits] r45755 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Sat Oct 29 19:31:31 UTC 2016


Author: carnil
Date: 2016-10-29 19:31:30 +0000 (Sat, 29 Oct 2016)
New Revision: 45755

Modified:
   data/CVE/list
Log:
Add bug reference for CVE-2016-7954/bundler

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-10-29 19:00:33 UTC (rev 45754)
+++ data/CVE/list	2016-10-29 19:31:30 UTC (rev 45755)
@@ -3544,7 +3544,7 @@
 	RESERVED
 CVE-2016-7954 [code execution via gem name collission in bundler]
 	RESERVED
-	- bundler <unfixed>
+	- bundler <unfixed> (bug #842504)
 	[jessie] - bundler <no-dsa> (Minor issue, too intrusive to backport)
 	[wheezy] - bundler <no-dsa> (Minor issue, too intrusive to backport)
 	NOTE: http://www.openwall.com/lists/oss-security/2016/10/04/5




More information about the Secure-testing-commits mailing list