oss-sec mailing list archives

CVE Request: various gems in aftermath of rubygem actionpack issue

From: Marcus Meissner <meissner () suse de>
Date: Fri, 1 Mar 2013 17:43:01 +0100

Hi,

I think these rubygem updates have got no CVE entry/ies yet:
https://support.cloud.engineyard.com/entries/22915701-january-14-2013-security-vulnerabilities-httparty-extlib-crack-nori-update-these-gems-immediately

Or should we use the Rubygem Action Pack CVE ids for it too (CVE-2013-0156)?

Ciao, Marcus

Current thread:

CVE Request: various gems in aftermath of rubygem actionpack issue Marcus Meissner (Mar 01)
- Re: CVE Request: various gems in aftermath of rubygem actionpack issue Reed Loden (Mar 01)
- Re: CVE Request: various gems in aftermath of rubygem actionpack issue Kurt Seifried (Mar 01)
  - Re: CVE Request: various gems in aftermath of rubygem actionpack issue Olivier Gonzalez (Mar 01)
    - Re: CVE Request: various gems in aftermath of rubygem actionpack issue Kurt Seifried (Mar 02)