[Secure-testing-commits] r50285 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-04-03 10:23:18 +0000 (Mon, 03 Apr 2017)
New Revision: 50285

Modified:
   data/CVE/list
Log:
Add note for CVE-2017-6181

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-04-03 10:18:40 UTC (rev 50284)
+++ data/CVE/list	2017-04-03 10:23:18 UTC (rev 50285)
@@ -3475,7 +3475,8 @@
 CVE-2017-6182 (In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the ...)
 	NOT-FOR-US: Sophos
 CVE-2017-6181 (The parse_char_class function in regparse.c in the Onigmo (aka ...)
-	TODO: check
+	NOTE: https://bugs.ruby-lang.org/issues/13234
+	TODO: check, if affects ruby versions other than 2.4
 CVE-2017-6180 (Keekoon KK002 devices 1.8.12 HD have a Cross Site Request Forgery ...)
 	NOT-FOR-US: Keekoon KK002 devices
 CVE-2017-6179