[Git][security-tracker-team/security-tracker][master] 2 commits: data/CVE/list: Add commit that fixes CVE-2018-1000544 (ruby-zip).

[Mike Gabriel]

Mike Gabriel pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8ccf2d71 by Mike Gabriel at 2018-07-17T19:33:46+02:00
data/CVE/list: Add commit that fixes CVE-2018-1000544 (ruby-zip).

- - - - -
9401f123 by Mike Gabriel at 2018-07-17T19:34:20+02:00
Add ruby-zip to dla-needed.txt.

- - - - -


2 changed files:

- data/CVE/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -3796,6 +3796,7 @@ CVE-2018-1000545
 CVE-2018-1000544 (rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory ...)
 	- ruby-zip <unfixed> (bug #902720)
 	NOTE: https://github.com/rubyzip/rubyzip/issues/369
+	NOTE: https://github.com/rubyzip/rubyzip/commit/ce4208fdecc2ad079b05d3c49d70fe6ed1d07016
 CVE-2018-1000543 (Akiee version 0.0.3 contains a XSS leading to code execution due to ...)
 	NOT-FOR-US: Akiee
 CVE-2018-1000542 (netbeans-mmd-plugin version <= 1.4.3 contains a XML External Entity ...)


=====================================
data/dla-needed.txt
=====================================
--- a/data/dla-needed.txt
+++ b/data/dla-needed.txt
@@ -111,6 +111,8 @@ resiprocate
 --
 ruby2.1
 --
+ruby-zip
+--
 slurm-llnl (Thorsten Alteholz)
   NOTE: 20180630: test package uploaded to https://people.debian.org/~alteholz/packages/jessie-lts/slurm-llnl/
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/ebc66f79026e623c894cbce02ac99725e3b66733...9401f1235a2261c82f9d0684e2ce1969042b2af3

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/ebc66f79026e623c894cbce02ac99725e3b66733...9401f1235a2261c82f9d0684e2ce1969042b2af3
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180717/a504d0b9/attachment.html>