[Git][security-tracker-team/security-tracker][master] CVE-2025-24294/ruby2.7: bullseye postponed

Sylvain Beucler (@beuc) gitlab at salsa.debian.org
Wed Jul 16 21:21:53 BST 2025



Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0c997e20 by Sylvain Beucler at 2025-07-16T22:21:46+02:00
CVE-2025-24294/ruby2.7: bullseye postponed

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1233,6 +1233,7 @@ CVE-2025-24294 (The attack vector is a potential Denial of Service (DoS). The vu
 	- ruby3.1 <removed>
 	[bookworm] - ruby3.1 <no-dsa> (Minor issue)
 	- ruby2.7 <removed>
+	[bullseye] - ruby2.7 <postponed> (Minor issue; DoS)
 	NOTE: https://www.ruby-lang.org/en/news/2025/07/08/dos-resolv-cve-2025-24294/
 	NOTE: https://github.com/ruby/resolv/commit/4c2f71b5e80826506f78417d85b38481c058fb25 (v0.6.2)
 	NOTE: https://github.com/ruby/resolv/commit/24ed513f028d8e5c76310fcdecf07f79eb721a32 (v0.3.1)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0c997e20dc2f2b8f7f9f3a9bf5a4638307217d28

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0c997e20dc2f2b8f7f9f3a9bf5a4638307217d28
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250716/6fca819a/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list