[Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage ruby-zip for stretch LTS.

[Chris Lamb]

Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9d684d7d by Chris Lamb at 2020-07-10T11:23:16+01:00
data/dla-needed.txt: Triage ruby-zip for stretch LTS.

- - - - -


1 changed file:

- data/dla-needed.txt


Changes:

=====================================
data/dla-needed.txt
=====================================
@@ -135,6 +135,10 @@ rails (Sylvain Beucler)
 ruby-rack (Utkarsh Gupta)
   NOTE: probably not affected (parse_cookies_header() is not available in Jessie, but code might hide somewhere else) (thorsten)
 --
+ruby-zip
+  NOTE: 20200710: Vulnerable to at least CVE-2018-1000544. (lamby)
+  NOTE: 20200710: Was fixed in jessie LTS via DLA-1467-1. (lamby)
+--
 samba (Roberto C. Sánchez)
   NOTE: 20200703: Check with security team so that there's no clash for Stretch update. (utkarsh)
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9d684d7d4c03a60ab290816ebe3fb6667c661ead

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9d684d7d4c03a60ab290816ebe3fb6667c661ead
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200710/a608f2aa/attachment-0001.html>