Ubuntu
ruby2.5 package

ruby2.5 2.5.1-5ubuntu4.3 source package in Ubuntu

Changelog

ruby2.5 (2.5.1-5ubuntu4.3) cosmic-security; urgency=medium

  * SECURITY UPDATE: Delete directory using symlink when decompressing tar,
    Escape sequence injection vulnerability in gem owner, Escape sequence
    injection vulnerability in API response handling, Arbitrary code exec,
    Escape sequence injection vulnerability in errors
    - debian/patches/CVE-2019-8320-25.patch: fix in
      lib/rubygems/command_manager.rb,
      lib/rubygems/commands/owner_command.rb,
      lib/rubygems/gemcutter_utilities.rb,
      lib/rubygems/installer.rb,
      lib/rubygems/package.rb,
      test/rubygems/test_gem_installer.rb,
      test/rubygems/test_gem_package.rb,
      test/rubygems/test_gem_text.rb.
    - CVE-2019-8320
    - CVE-2019-8321
    - CVE-2019-8322
    - CVE-2019-8323
    - CVE-2019-8324
    - CVE-2019-8325

 -- <email address hidden> (Leonidas S. Barbosa)  Tue, 02 Apr 2019 13:31:23 -0300

Upload details

Uploaded by:
Leonidas S. Barbosa
Uploaded to:
Cosmic
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
ruby
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
ruby2.5_2.5.1.orig.tar.gz 14.9 MiB d690140ba5b91b23d990dad9170fca8ef8e9e5ac8b62f1eb7a84ecf1edce2ed3
ruby2.5_2.5.1-5ubuntu4.3.debian.tar.xz 127.8 KiB 2882861ecc71ade306ec56e04120090da160e39b63a2d7d12ce7609d3aa7fa2c
ruby2.5_2.5.1-5ubuntu4.3.dsc 2.5 KiB 79f169abf098ca86a2de6c473292478d6dd7ada26ded8a48fc7e877f027222cc

View changes file

Binary packages built by this source

libruby2.5: No summary available for libruby2.5 in ubuntu cosmic.

No description available for libruby2.5 in ubuntu cosmic.

libruby2.5-dbgsym: No summary available for libruby2.5-dbgsym in ubuntu cosmic.

No description available for libruby2.5-dbgsym in ubuntu cosmic.

ruby2.5: No summary available for ruby2.5 in ubuntu cosmic.

No description available for ruby2.5 in ubuntu cosmic.

ruby2.5-dbgsym: No summary available for ruby2.5-dbgsym in ubuntu cosmic.

No description available for ruby2.5-dbgsym in ubuntu cosmic.

ruby2.5-dev: No summary available for ruby2.5-dev in ubuntu cosmic.

No description available for ruby2.5-dev in ubuntu cosmic.

ruby2.5-doc: No summary available for ruby2.5-doc in ubuntu cosmic.

No description available for ruby2.5-doc in ubuntu cosmic.