Commit 2d46eb74 authored by Salvatore Bonaccorso's avatar Salvatore Bonaccorso

Track fixed version for CVE-2019-16892/ruby-zip via unstable

parent 067ecc06
......@@ -7912,7 +7912,7 @@ CVE-2019-16894 (download.php in inoERP 4.15 allows SQL injection through insecur
CVE-2019-16892 (In Rubyzip before 1.3.0, a crafted ZIP file can bypass application che ...)
- ruby-zip <unfixed> (low; bug #941222)
- ruby-zip 2.0.0-1 (low; bug #941222)
[buster] - ruby-zip <no-dsa> (Minor issue)
[stretch] - ruby-zip <no-dsa> (Minor issue)
[jessie] - ruby-zip <postponed> (Minor issue, zip bomb non-default mitigation)
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment