Publishing details

Changelog

ruby1.9.1 (1.9.3.0-1ubuntu2.8) precise-security; urgency=low

  * SECURITY UPDATE: safe level restriction bypass via DL and Fiddle
    - debian/patches/CVE-2013-2065.patch: perform taint checking in
      ext/dl/lib/dl/func.rb, ext/fiddle/function.c.
    - CVE-2013-2065
  * SECURITY UPDATE: denial of service and possible code execution via
    heap overflow in floating point parsing.
    - debian/patches/CVE-2013-4164.patch: check lengths in util.c, added
      test to test/ruby/test_float.rb.
    - CVE-2013-4164
 -- Marc Deslauriers <email address hidden>   Tue, 26 Nov 2013 12:54:01 -0500

Available diffs

Builds

Package files