[Secure-testing-commits] r58801 - data/CVE

Guido Guenther agx at moszumanska.debian.org
Thu Dec 21 15:21:36 UTC 2017


Author: agx
Date: 2017-12-21 15:21:36 +0000 (Thu, 21 Dec 2017)
New Revision: 58801

Modified:
   data/CVE/list
Log:
CVE-2017-17405: add commits for ruby2.3

which is in stable

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-12-21 13:14:36 UTC (rev 58800)
+++ data/CVE/list	2017-12-21 15:21:36 UTC (rev 58801)
@@ -6101,6 +6101,8 @@
 	- ruby1.8 <removed>
 	NOTE: https://www.ruby-lang.org/en/news/2017/12/14/net-ftp-command-injection-cve-2017-17405/
 	NOTE: https://github.com/ruby/ruby/commit/6d3f72e5be2312be312f2acbf3465b05293c1431
+	NOTE: ruby2.3: https://github.com/ruby/ruby/commit/1cfe43fd85c66a9e2b5068480b3e043c31e6b8ca
+	NOTE: ruby2.3: https://github.com/ruby/ruby/commit/3ec034c597e6d40543bb844dc8f96645bef4bed2
 CVE-2017-17404
 	RESERVED
 CVE-2017-17403




More information about the Secure-testing-commits mailing list