Format: 1.8 Date: Tue, 02 Apr 2019 13:31:23 -0300 Source: ruby2.5 Binary: ruby2.5 libruby2.5 ruby2.5-dev ruby2.5-doc Architecture: i386 Version: 2.5.1-5ubuntu4.3 Distribution: cosmic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Leonidas S. Barbosa Description: libruby2.5 - Libraries necessary to run Ruby 2.5 ruby2.5 - Interpreter of object-oriented scripting language Ruby ruby2.5-dev - Header files for compiling extension modules for the Ruby 2.5 ruby2.5-doc - Documentation for Ruby 2.5 Changes: ruby2.5 (2.5.1-5ubuntu4.3) cosmic-security; urgency=medium . * SECURITY UPDATE: Delete directory using symlink when decompressing tar, Escape sequence injection vulnerability in gem owner, Escape sequence injection vulnerability in API response handling, Arbitrary code exec, Escape sequence injection vulnerability in errors - debian/patches/CVE-2019-8320-25.patch: fix in lib/rubygems/command_manager.rb, lib/rubygems/commands/owner_command.rb, lib/rubygems/gemcutter_utilities.rb, lib/rubygems/installer.rb, lib/rubygems/package.rb, test/rubygems/test_gem_installer.rb, test/rubygems/test_gem_package.rb, test/rubygems/test_gem_text.rb. - CVE-2019-8320 - CVE-2019-8321 - CVE-2019-8322 - CVE-2019-8323 - CVE-2019-8324 - CVE-2019-8325 Checksums-Sha1: 8f168bb3ae2e2a32c978e2d2688ffc21b9398427 5544868 libruby2.5-dbgsym_2.5.1-5ubuntu4.3_i386.ddeb 41066be330873de0c195793a8f248e7e17a171e6 3188508 libruby2.5_2.5.1-5ubuntu4.3_i386.deb 974392e5dcebdd4cc143b3ca961d1542d79d2461 5156 ruby2.5-dbgsym_2.5.1-5ubuntu4.3_i386.ddeb 9373a90cc99d19aa2053c31a6a2e40af0d124900 63652 ruby2.5-dev_2.5.1-5ubuntu4.3_i386.deb f8c4163c04743ced13018b4d7aacb70e7e79d474 7104 ruby2.5_2.5.1-5ubuntu4.3_i386.buildinfo d745dc804e59ffbbc65dcc0f51a8a0de80eb22af 48748 ruby2.5_2.5.1-5ubuntu4.3_i386.deb Checksums-Sha256: de3febc0882f1f894132d26334f5a08909dd9f72121f27235bb103b827a33bcb 5544868 libruby2.5-dbgsym_2.5.1-5ubuntu4.3_i386.ddeb e606757dd2afd672c2a609d1b27c1316d107ed2bbec15dc6dacfc47e0d5d9444 3188508 libruby2.5_2.5.1-5ubuntu4.3_i386.deb 4f5544bda8b42dfdfe61b02c3da9ceddcc808bc06eede1d3b05a09afbf434406 5156 ruby2.5-dbgsym_2.5.1-5ubuntu4.3_i386.ddeb 9646e11248fff76c02a97a7318b8938fdbef7da76a4792e2b79fbc87bf73dc8d 63652 ruby2.5-dev_2.5.1-5ubuntu4.3_i386.deb 1ea81a96d8c9124cb0eaac827be1de1a9f1ca2cbd1b2c99aae6ce2297b51105a 7104 ruby2.5_2.5.1-5ubuntu4.3_i386.buildinfo 84d9c1ab86199a3eb832c2b41493cc47bc49c40c9fcbd34963b36f5d40fbf1a0 48748 ruby2.5_2.5.1-5ubuntu4.3_i386.deb Files: a32a02ea0929d38525d055155648886d 5544868 debug optional libruby2.5-dbgsym_2.5.1-5ubuntu4.3_i386.ddeb 0367b1e0b37b82c5ec73cb4efa4c3da7 3188508 libs optional libruby2.5_2.5.1-5ubuntu4.3_i386.deb ab0cf9a2a64891d2727325ae25adcca8 5156 debug optional ruby2.5-dbgsym_2.5.1-5ubuntu4.3_i386.ddeb 216677a43d33f4d32777059e4b14b3e0 63652 ruby optional ruby2.5-dev_2.5.1-5ubuntu4.3_i386.deb f2470b2289ce883a58cef96b18124ccd 7104 ruby optional ruby2.5_2.5.1-5ubuntu4.3_i386.buildinfo d6c5221f86f8f13566754dc3e62d73d3 48748 ruby optional ruby2.5_2.5.1-5ubuntu4.3_i386.deb Original-Maintainer: Debian Ruby Team