ruby2.0 2.0.0.484+really457-3ubuntu1.1 source package in Ubuntu

Changelog

ruby2.0 (2.0.0.484+really457-3ubuntu1.1) utopic-security; urgency=medium

  * SECURITY UPDATE: denial of service via buffer overrun in encodes
    function
    - debian/patches/CVE-2014x-4975.patch: properly calculate buffer size
      in pack.c, added test to test/ruby/test_pack.rb.
    - CVE-2014-4975
  * SECURITY UPDATE: denial of service via XML expansion
    - debian/patches/CVE-2014-8080.patch: limit expansions in
      lib/rexml/entity.rb, added tests to test/rexml/test_document.rb,
      test/rexml/test_entity.rb.
    - CVE-2014-8080
 -- Marc Deslauriers <email address hidden>   Mon, 03 Nov 2014 09:26:25 -0500

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Utopic
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
ruby
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
ruby2.0_2.0.0.484+really457.orig.tar.xz 6.7 MiB 3ba1891621ca2b246600ea64c867e8ca25dde3ff5bb2a77c8e43572802a07e62
ruby2.0_2.0.0.484+really457-3ubuntu1.1.debian.tar.xz 77.1 KiB 8cf4d54cc706d0aa9e250a34e2ba0a82f6384d5c3988eab2cc89c5009f780163
ruby2.0_2.0.0.484+really457-3ubuntu1.1.dsc 2.4 KiB 456dd4256f300b264a106d0312aa192c0cf0645d89371758b1e5f25cb768facd

View changes file

Binary packages built by this source

libruby2.0: No summary available for libruby2.0 in ubuntu utopic.

No description available for libruby2.0 in ubuntu utopic.

ruby2.0: No summary available for ruby2.0 in ubuntu utopic.

No description available for ruby2.0 in ubuntu utopic.

ruby2.0-dev: No summary available for ruby2.0-dev in ubuntu utopic.

No description available for ruby2.0-dev in ubuntu utopic.

ruby2.0-doc: No summary available for ruby2.0-doc in ubuntu utopic.

No description available for ruby2.0-doc in ubuntu utopic.