[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Update information for CVE-2017-16229/ruby-ox

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
11db8fd2 by Salvatore Bonaccorso at 2018-02-27T17:15:26+01:00
Update information for CVE-2017-16229/ruby-ox

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -22718,9 +22718,10 @@ CVE-2017-16231 [match() stack overflow]
 CVE-2017-16230 (In admin/write-post.php in Typecho through 1.1, one can log in to the ...)
 	NOT-FOR-US: Typecho
 CVE-2017-16229 (In the Ox gem 2.8.1 for Ruby, the process crashes with a stack-based ...)
-	- ruby-ox <undetermined>
+	- ruby-ox 2.8.2-1
 	NOTE: https://github.com/ohler55/ox/issues/195
-	TODO: check
+	NOTE: https://github.com/ohler55/ox/pull/196
+	NOTE: https://github.com/ohler55/ox/commit/0708ae44faf2ffc3d9330daf6ae023859a8b168b
 CVE-2017-16228 (Dulwich before 0.18.5, when an SSH subprocess is used, allows remote ...)
 	- dulwich 0.18.5-1
 	[stretch] - dulwich <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/11db8fd2391e259626c533066855e9a193c5f437

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/11db8fd2391e259626c533066855e9a193c5f437
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180227/e4dabcf5/attachment.html>