Author: holger
Date: 2014-11-27 13:16:14 +0000 (Thu, 27 Nov 2014)
New Revision: 30384

Modified:
   data/CVE/list
   data/dla-needed.txt
Log:
CVE-2012-6109: mark as <not-affected> for squeeze as vulnerable code is not 
present

Modified: data/CVE/list
===================================================================
--- data/CVE/list       2014-11-27 13:08:17 UTC (rev 30383)
+++ data/CVE/list       2014-11-27 13:16:14 UTC (rev 30384)
@@ -43794,6 +43794,7 @@
 CVE-2012-6109 (lib/rack/multipart.rb in Rack before 1.1.4, 1.2.x before 1.2.6, 
1.3.x ...)
        - ruby-rack 1.4.1-2.1 (bug #698440)
        - librack-ruby <removed>
+       [squeeze] - ruby-rack <not-affected> (vulnerable code not present)
        NOTE: 
https://github.com/rack/rack/commit/4fc44671b3cad569421f4f8b775c0590b86f575e
        NOTE: 
https://groups.google.com/forum/#!msg/rack-devel/1w4_fWEgTdI/XAkSNHjtdTsJ
 CVE-2012-6108 (HP Linux Imaging and Printing (HPLIP) before 3.13.2 uses ...)

Modified: data/dla-needed.txt
===================================================================
--- data/dla-needed.txt 2014-11-27 13:08:17 UTC (rev 30383)
+++ data/dla-needed.txt 2014-11-27 13:16:14 UTC (rev 30384)
@@ -36,8 +36,6 @@
 --
 libphp-snoopy
 --
-librack-ruby (Holger Levsen)
---
 libspring-2.5-java
 --
 libvncserver


_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

Reply via email to