[Git][security-tracker-team/security-tracker][master] Claim ruby-nokogiri in dla-needed.txt

[Markus Koschany (@apo)]

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker


Commits:
3c9fdc78 by Markus Koschany at 2021-06-01T00:48:17+02:00
Claim ruby-nokogiri in dla-needed.txt

- - - - -


1 changed file:

- data/dla-needed.txt


Changes:

=====================================
data/dla-needed.txt
=====================================
@@ -101,9 +101,10 @@ ruby-kaminari
 ruby-kramdown
   NOTE: 20210412: Probably needs two commits (see the one linked in the comment of d6a1cbcb2c. (lamby)
 --
-ruby-nokogiri
+ruby-nokogiri (Markus Koschany)
   NOTE: 20210403: CVE-2020-26247: Java-level API not included in stretch but CVE also affects C/Ruby-level APIs;
   NOTE: 20210403: check if default change (trust -> don't trust external schemas) possibly breaks compatibility (Beuc)
+  NOTE: 20210601: Very similar to the Jessie fix but the r-deps are different and require more testing.
 --
 salt
   NOTE: 20210329: WIP (utkarsh)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3c9fdc7896e0cbf1a48aaea3557613ef90c8a1c1

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3c9fdc7896e0cbf1a48aaea3557613ef90c8a1c1
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210531/99cbff1b/attachment.htm>