Publishing details

• Created on 2019-03-29 by Ubuntu Archive Auto-Sync
• Removed from disk on 2020-07-14.
• Removal requested on 2020-07-14.
• Published on 2019-03-29

Changelog

ruby2.5 (2.5.5-1ubuntu1) disco; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - d/p/rubygems-2388.patch: Allow either Fetcher or OpenSSL exceptions
      when using invalid cert in rubygems testcase.
      - update the patch with the merged upstream PR: 2507
    - various backports for better openssl support (formerly undocumented in
      changelog)
      + d/p/0001-openssl-buffering.rb-no-RS-when-output.patch
      + d/p/0006-Workaround-for-old-LibreSSL.patch
  * Dropped changes: d/p/1dfc377ae3b174b043d3f0ed36de57b0296b34d0.patch
    - upstream

ruby2.5 (2.5.5-1) unstable; urgency=medium

  * New upstream version 2.5.5. Includes a series of bug fixes, most notably
    for 6 security bugs discovered in Rubygems:
    - CVE-2019-8320: Delete directory using symlink when decompressing tar
    - CVE-2019-8321: Escape sequence injection vulnerability in verbose
    - CVE-2019-8322: Escape sequence injection vulnerability in gem owner
    - CVE-2019-8323: Escape sequence injection vulnerability in API response
      handling
    - CVE-2019-8324: Installing a malicious gem may lead to arbitrary code
      execution
    - CVE-2019-8325: Escape sequence injection vulnerability in errors
  * Rebase patches. The following patches were applied upstream and dropped
    from the Debian package:
    - 0011-Update-for-tzdata-2018f.patch
    - 0012-test-update-test-certificate.patch

 -- Gianfranco Costamagna <email address hidden>  Thu, 28 Mar 2019 10:47:03 +0100

Builds

• amd64
• arm64
• armhf
• i386
• ppc64el
• s390x

Package files

• libruby2.5-dbgsym_2.5.5-1ubuntu1_amd64.ddeb (5.9 MiB)
• libruby2.5-dbgsym_2.5.5-1ubuntu1_arm64.ddeb (5.9 MiB)
• libruby2.5-dbgsym_2.5.5-1ubuntu1_armhf.ddeb (5.7 MiB)
• libruby2.5-dbgsym_2.5.5-1ubuntu1_i386.ddeb (5.3 MiB)
• libruby2.5-dbgsym_2.5.5-1ubuntu1_ppc64el.ddeb (6.8 MiB)
• libruby2.5-dbgsym_2.5.5-1ubuntu1_s390x.ddeb (6.1 MiB)
• libruby2.5_2.5.5-1ubuntu1_amd64.deb (2.9 MiB)
• libruby2.5_2.5.5-1ubuntu1_arm64.deb (2.8 MiB)
• libruby2.5_2.5.5-1ubuntu1_armhf.deb (2.7 MiB)
• libruby2.5_2.5.5-1ubuntu1_i386.deb (3.0 MiB)
• libruby2.5_2.5.5-1ubuntu1_ppc64el.deb (3.2 MiB)
• libruby2.5_2.5.5-1ubuntu1_s390x.deb (2.8 MiB)
• ruby2.5-dbgsym_2.5.5-1ubuntu1_amd64.ddeb (5.1 KiB)
• ruby2.5-dbgsym_2.5.5-1ubuntu1_arm64.ddeb (5.3 KiB)
• ruby2.5-dbgsym_2.5.5-1ubuntu1_armhf.ddeb (5.4 KiB)
• ruby2.5-dbgsym_2.5.5-1ubuntu1_i386.ddeb (5.0 KiB)
• ruby2.5-dbgsym_2.5.5-1ubuntu1_ppc64el.ddeb (5.2 KiB)
• ruby2.5-dbgsym_2.5.5-1ubuntu1_s390x.ddeb (5.1 KiB)
• ruby2.5-dev_2.5.5-1ubuntu1_amd64.deb (62.3 KiB)
• ruby2.5-dev_2.5.5-1ubuntu1_arm64.deb (62.2 KiB)
• ruby2.5-dev_2.5.5-1ubuntu1_armhf.deb (62.2 KiB)
• ruby2.5-dev_2.5.5-1ubuntu1_i386.deb (62.2 KiB)
• ruby2.5-dev_2.5.5-1ubuntu1_ppc64el.deb (62.2 KiB)
• ruby2.5-dev_2.5.5-1ubuntu1_s390x.deb (62.3 KiB)
• ruby2.5-doc_2.5.5-1ubuntu1_all.deb (1.7 MiB)
• ruby2.5_2.5.5-1ubuntu1.debian.tar.xz (115.8 KiB)
• ruby2.5_2.5.5-1ubuntu1.dsc (2.4 KiB)
• ruby2.5_2.5.5-1ubuntu1_amd64.deb (47.5 KiB)
• ruby2.5_2.5.5-1ubuntu1_arm64.deb (47.5 KiB)
• ruby2.5_2.5.5-1ubuntu1_armhf.deb (47.4 KiB)
• ruby2.5_2.5.5-1ubuntu1_i386.deb (47.6 KiB)
• ruby2.5_2.5.5-1ubuntu1_ppc64el.deb (47.8 KiB)
• ruby2.5_2.5.5-1ubuntu1_s390x.deb (47.5 KiB)
• ruby2.5_2.5.5.orig.tar.xz (9.7 MiB)