[Git][security-tracker-team/security-tracker][master] Reserve DLA-3447-1 for ruby2.5
Chris Lamb (@lamby)
lamby at debian.org
Tue Jun 6 21:23:43 BST 2023
Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker
Commits:
ae773d80 by Chris Lamb at 2023-06-06T13:23:27-07:00
Reserve DLA-3447-1 for ruby2.5
- - - - -
2 changed files:
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[06 Jun 2023] DLA-3447-1 ruby2.5 - security update
+ {CVE-2023-28755 CVE-2023-28756}
+ [buster] - ruby2.5 2.5.5-3+deb10u5
[05 Jun 2023] DLA-3446-1 linux-5.10 - security update
{CVE-2023-0386 CVE-2023-31436 CVE-2023-32233}
[buster] - linux-5.10 5.10.179-1~deb10u1
=====================================
data/dla-needed.txt
=====================================
@@ -172,10 +172,6 @@ ruby-rails-html-sanitizer
NOTE: 20221231: Added by Front-Desk
NOTE: 20230303: this cannot be fixed unless ruby-loofah is fixed with appropriate methods. (utkarsh)
--
-ruby2.5 (Chris Lamb)
- NOTE: 20230602: Added by Front-Desk
- NOTE: 20230602: look at no-dsa issues (pochu)
---
salt
NOTE: 20220814: Added by Front-Desk
NOTE: 20220814: I am not sure, whether it is possible to fix issues
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ae773d80f3bb6b434353d0a468275983ec9b19a6
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ae773d80f3bb6b434353d0a468275983ec9b19a6
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230606/c6d45a58/attachment.htm>
More information about the debian-security-tracker-commits
mailing list