[Secure-testing-commits] r58744 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Wed Dec 20 21:45:23 UTC 2017


Author: carnil
Date: 2017-12-20 21:45:23 +0000 (Wed, 20 Dec 2017)
New Revision: 58744

Modified:
   data/CVE/list
Log:
Add bug references for CVE-2017-17790

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-12-20 21:32:12 UTC (rev 58743)
+++ data/CVE/list	2017-12-20 21:45:23 UTC (rev 58744)
@@ -107,8 +107,8 @@
 CVE-2017-17791
 	RESERVED
 CVE-2017-17790 (The lazy_initialize function in lib/resolv.rb in Ruby through 2.4.3 ...)
-	- ruby2.5 <unfixed>
-	- ruby2.3 <unfixed>
+	- ruby2.5 <unfixed> (bug #884878)
+	- ruby2.3 <unfixed> (bug #884879)
 	[stretch] - ruby2.3 <postponed> (Minor issue, can be fixed along in future DSA)
 	- ruby2.1 <removed>
 	[jessie] - ruby2.1 <postponed> (Minor issue, can be fixed along in future DSA)




More information about the Secure-testing-commits mailing list