Author: gilbert-guest Date: 2011-02-27 18:37:33 +0000 (Sun, 27 Feb 2011) New Revision: 16261 Modified: data/CVE/list Log: ruby/eglibc issues fixed Modified: data/CVE/list ==================================================================--- data/CVE/list 2011-02-26 21:33:14 UTC (rev 16260) +++ data/CVE/list 2011-02-27 18:37:33 UTC (rev 16261) @@ -1,6 +1,6 @@ CVE-2010-XXXX [eglibc: memory corruption] - glibc <removed> - - eglibc <unfixed> (bug #615120) + - eglibc 2.11.2-12 (bug #615120) NOTE: poc does not work on version 2.13 in experimental CVE-2011-XXXX [python2.6: distutils world-readable password] - python2.6 <unfixed> (low; bug #615118) @@ -273,13 +273,13 @@ RESERVED CVE-2011-1005 [Ruby Exception methods can bypass $SAFE] RESERVED - - ruby1.8 <unfixed> + - ruby1.8 1.8.7.334-1 - ruby1.9 <removed> - ruby1.9.1 <unfixed> TODO: check CVE-2011-1004 [Ruby FileUtils.remove_entry_secure symlink attack] RESERVED - - ruby1.8 <unfixed> + - ruby1.8 1.8.7.334-1 - ruby1.9 <removed> - ruby1.9.1 <unfixed> TODO: check