summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorSylvain Beucler <beuc@beuc.net>2021-04-03 16:20:37 +0200
committerSylvain Beucler <beuc@beuc.net>2021-04-03 16:20:37 +0200
commit294168cf828fd08951780b8a90f20440dd3a020d (patch)
tree332e3a5f9f383e805b7a7fcc35db224d1e86a11c
parenta85e0177cedf15ba282045e9644cc13db6273ad7 (diff)
dla: add ruby-nokogiri following conversation with initial triager
-rw-r--r--data/dla-needed.txt4
1 files changed, 4 insertions, 0 deletions
diff --git a/data/dla-needed.txt b/data/dla-needed.txt
index 0941a320ed..63f616c2bf 100644
--- a/data/dla-needed.txt
+++ b/data/dla-needed.txt
@@ -128,6 +128,10 @@ ruby-kaminari
NOTE: 20201009: This (↑) is an app-level patch for a rails app. A library-level patch
NOTE: 20201009: will needed to be written. Opened an issue at upstream, though somewhat inactive. (utkarsh)
--
+ruby-nokogiri
+ NOTE: 20210403: CVE-2020-26247: Java-level API not included in stretch but CVE also affects C/Ruby-level APIs;
+ NOTE: 20210403: check if default change (trust -> don't trust external schemas) possibly breaks compatibility (Beuc)
+--
salt (Utkarsh)
NOTE: 20210329: WIP (utkarsh)
--

© 2014-2024 Faster IT GmbH | imprint | privacy policy