[DRE-maint] Processed: Re: Bug#856683: Security - ruby-zip package vulnerable to CVE

[Debian Bug Tracking System]

Processing control commands:

> reassign -1 src:ruby-zip
Bug #856683 [ruby-zip] Security - ruby-zip package vulnerable to CVE
Bug reassigned from package 'ruby-zip' to 'src:ruby-zip'.
No longer marked as found in versions ruby-zip/1.1.6-1.
Ignoring request to alter fixed versions of bug #856683 to the same values previously set
> forcemerge 856269 -1
Bug #856269 {Done: Salvatore Bonaccorso <carnil at debian.org>} [src:ruby-zip] ruby-zip: CVE-2017-5946
Bug #856683 [src:ruby-zip] Security - ruby-zip package vulnerable to CVE
Set Bug forwarded-to-address to 'https://github.com/rubyzip/rubyzip/issues/315'.
Severity set to 'grave' from 'normal'
Marked Bug as done
Marked as fixed in versions ruby-zip/1.2.0-1.1.
Marked as found in versions ruby-zip/1.1.6-1.
Added tag(s) security, upstream, and patch.
Merged 856269 856683

-- 
856269: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=856269
856683: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=856683
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems