[Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: add some notes for rubygems

Lucas Kanashiro (@kanashiro) kanashiro at debian.org
Wed Apr 23 20:05:01 BST 2025



Lucas Kanashiro pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ddccef45 by Lucas Kanashiro at 2025-04-23T16:04:45-03:00
data/dla-needed.txt: add some notes for rubygems

- - - - -


1 changed file:

- data/dla-needed.txt


Changes:

=====================================
data/dla-needed.txt
=====================================
@@ -318,6 +318,8 @@ rubygems (kanashiro)
   NOTE: 20250324: Asked most recent uploader about this.  (spwhitton)
   NOTE: 20250407: CVE-2025-27221 is already fixed in src:rubygems/sid,trixie. (kanashiro)
   NOTE: 20250407: It needs to be fixed in src:ruby3.3 (there are 3 copies of the uri gem, affected by this CVE). (kanashiro)
+  NOTE: 20250423: Fix in src:rubygems sent to bookworm-p-u (#1103926)
+  NOTE: 20250423: Fix for bullseye also staged in the git repo, will be uploaded once RM approves the package in bookworm-p-u (kanashiro)
 --
 simplesamlphp
   NOTE: 20250331: Added by Front-Desk (apo)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ddccef4594618ca638c6e48e1bc9ece491d82cfc

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ddccef4594618ca638c6e48e1bc9ece491d82cfc
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250423/8e82bd3d/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list