[Git][security-tracker-team/security-tracker][master] Add further Debian bug reference for CVE-2018-1000073/jruby

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1da552c6 by Salvatore Bonaccorso at 2019-03-29T20:06:04Z
Add further Debian bug reference for CVE-2018-1000073/jruby

This one issue was not closed while adressing #895778 which was
collecting multiple CVEs, whilst it was corrected in the DSA covered by
DSA-4219-1 itself and adressed in 1.7.26-1+deb9u1 in stable.

New bug  was filled to cover this CVE specifically.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -59601,7 +59601,7 @@ CVE-2018-1000073 (RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3
 	[wheezy] - ruby1.9.1 <not-affected> (Vulnerable code not present)
 	- rubygems <removed>
 	[wheezy] - rubygems <not-affected> (Vulnerable code not present)
-	- jruby <unfixed> (bug #895778)
+	- jruby <unfixed> (bug #895778; bug #925986)
 	[jessie] - jruby <not-affected> (Vulnerable code not present)
 	[wheezy] - jruby <not-affected> (Vulnerable code not present)
 	NOTE: https://github.com/rubygems/rubygems/commit/1b931fc03b819b9a0214be3eaca844ef534175e2



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/1da552c6b4234f0d114eb628b0f68f91ea63c0a0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/1da552c6b4234f0d114eb628b0f68f91ea63c0a0
You're receiving this email because of your account on salsa.debian.org.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190329/14799c2d/attachment.html>