Skip to content
GitLab
Explore
Sign in
Register
Commits on Source (2)
data/CVE/list: Add commit that fixes CVE-2018-1000544 (ruby-zip).
· 8ccf2d71
Mike Gabriel
authored
Jul 17, 2018
8ccf2d71
Add ruby-zip to dla-needed.txt.
· 9401f123
Mike Gabriel
authored
Jul 17, 2018
9401f123
Show whitespace changes
Inline
Side-by-side
data/CVE/list
View file @
9401f123
...
...
@@ -3796,6 +3796,7 @@ CVE-2018-1000545
CVE-2018-1000544 (rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory ...)
- ruby-zip <unfixed> (bug #902720)
NOTE: https://github.com/rubyzip/rubyzip/issues/369
NOTE: https://github.com/rubyzip/rubyzip/commit/ce4208fdecc2ad079b05d3c49d70fe6ed1d07016
CVE-2018-1000543 (Akiee version 0.0.3 contains a XSS leading to code execution due to ...)
NOT-FOR-US: Akiee
CVE-2018-1000542 (netbeans-mmd-plugin version <= 1.4.3 contains a XML External Entity ...)
data/dla-needed.txt
View file @
9401f123
...
...
@@ -111,6 +111,8 @@ resiprocate
--
ruby2.1
--
ruby-zip
--
slurm-llnl (Thorsten Alteholz)
NOTE: 20180630: test package uploaded to https://people.debian.org/~alteholz/packages/jessie-lts/slurm-llnl/
--
...
...