ruby3.0 3.0.2-7ubuntu2 source package in Ubuntu

Changelog

ruby3.0 (3.0.2-7ubuntu2) jammy; urgency=medium

  * SECURITY UPDATE: Buffer overrun
    - debian/patches/CVE-2021-41816.patch: fix integer overflow making
      sure use of the check in rb_alloc_tmp_buffer2 in
      ext/cgi/escape/escape.c.
    - CVE-2021-41816
  * SECURITY UPDATE: ReDoS vulnerability
    - debian/patches/CVE-2021-41817-*.patch: add length limit option
      for methods that parses date strings and mimic prev behaviour
      in  ext/date/date_core.c, test/date/test_date_parse.rb.
    - CVE-2021-41817
  * SECURITY UPDATE: Mishandles sec prefixes in cookie names
    - debian/patches/CVE-2021-41819.patch: when parsing cookies, only
      decode the values in lib/cgi/cookie.rb, test/cgi/test_cgi_cookie.rb.
    - CVE-2021-41819

 -- Leonidas Da Silva Barbosa <email address hidden>  Thu, 17 Mar 2022 13:09:20 -0300

Upload details

Uploaded by:
Leonidas S. Barbosa
Sponsored by:
Marc Deslauriers
Uploaded to:
Jammy
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
misc
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Jammy release main misc

Downloads

File Size SHA-256 Checksum
ruby3.0_3.0.2.orig.tar.xz 12.1 MiB 805c551cb7f2c8640228eb393c1313f23639924e4ba4032bae33632092ef59c7
ruby3.0_3.0.2-7ubuntu2.debian.tar.xz 215.6 KiB afb14a056e84ce7e03722df2e9994cf34ef96b666ada091d1a1e44cd9a23837c
ruby3.0_3.0.2-7ubuntu2.dsc 2.5 KiB 66967f66806019975d3b3a2d2bb159ee9d803e1777456712de53327345eea61e

View changes file

Binary packages built by this source

libruby3.0: Libraries necessary to run Ruby 3.0

 Ruby is the interpreted scripting language for quick and easy
 object-oriented programming. It has many features to process text
 files and to do system management tasks (as in perl). It is simple,
 straight-forward, and extensible.
 .
 This package includes the 'libruby-3.0' library, necessary to run Ruby 3.0.
 (API version 3.0.0)

libruby3.0-dbgsym: debug symbols for libruby3.0
ruby3.0: Interpreter of object-oriented scripting language Ruby

 Ruby is the interpreted scripting language for quick and easy
 object-oriented programming. It has many features to process text
 files and to do system management tasks (as in perl). It is simple,
 straight-forward, and extensible.
 .
 In the name of this package, `3.0' indicates the Ruby library compatibility
 version. This package currently provides the `3.0.x' branch of Ruby.

ruby3.0-dbgsym: debug symbols for ruby3.0
ruby3.0-dev: Header files for compiling extension modules for the Ruby 3.0

 Ruby is the interpreted scripting language for quick and easy
 object-oriented programming. It has many features to process text
 files and to do system management tasks (as in perl). It is simple,
 straight-forward, and extensible.
 .
 This package contains the header files and the mkmf library, necessary
 to make extension library for Ruby 3.0. It is also required to build
 many gems.

ruby3.0-doc: No summary available for ruby3.0-doc in ubuntu kinetic.

No description available for ruby3.0-doc in ubuntu kinetic.