Format: 1.8 Date: Fri, 15 Feb 2013 09:39:19 -0500 Source: ruby1.9.1 Binary: ruby1.9.1 libruby1.9.1 libruby1.9.1-dbg ruby1.9.1-dev libtcltk-ruby1.9.1 ruby1.9.1-examples ri1.9.1 ruby1.9.1-full ruby1.9.3 Architecture: amd64 Version: 1.9.3.0-1ubuntu2.5 Distribution: precise Urgency: low Maintainer: Ubuntu/amd64 Build Daemon Changed-By: Marc Deslauriers Description: libruby1.9.1 - Libraries necessary to run Ruby 1.9.1 libruby1.9.1-dbg - Debugging symbols for Ruby 1.9.1 libtcltk-ruby1.9.1 - Tcl/Tk interface for Ruby 1.9.1 ri1.9.1 - Ruby Interactive reference (for Ruby 1.9.1) ruby1.9.1 - Interpreter of object-oriented scripting language Ruby ruby1.9.1-dev - Header files for compiling extension modules for the Ruby 1.9.1 ruby1.9.1-examples - Examples for Ruby 1.9 ruby1.9.1-full - Ruby 1.9.1 full installation ruby1.9.3 - Interpreter of object-oriented scripting language Ruby, version 1 Changes: ruby1.9.1 (1.9.3.0-1ubuntu2.5) precise-security; urgency=low . * SECURITY UPDATE: denial of service via hash collisions - debian/patches/20121120-cve-2012-5371.diff: replace hash implementation in common.mk, random.c, siphash.*, string.c. - CVE-2012-5371 * SECURITY UPDATE: xss in documents generated by rdoc - debian/patches/CVE-2013-0256.patch: fix xss in lib/rdoc/generator/template/darkfish/js/darkfish.js. - CVE-2013-0256 * SECURITY UPDATE: DoS and unsafe object creation via JSON - debian/patches/CVE-2013-0269.patch: fix JSON parsing in ext/json/lib/json/add/core.rb, ext/json/lib/json/common.rb, ext/json/parser/parser.c, ext/json/parser/parser.rl, test/json/test_json.rb, test/json/test_json_addition.rb, test/json/test_json_string_matching.rb. - CVE-2013-0269 * Patches taken from Debian 1.9.3.194-7 package. Checksums-Sha1: a05d2623841b804b87803b7d48360fd741ba0c2b 37010 ruby1.9.1_1.9.3.0-1ubuntu2.5_amd64.deb f1525a9aa7eadc80d234936b3bc20e0fca5b0561 4101818 libruby1.9.1_1.9.3.0-1ubuntu2.5_amd64.deb 817a476591d173ea8ce24a8dcc38ed872e2c1c60 3396998 libruby1.9.1-dbg_1.9.3.0-1ubuntu2.5_amd64.deb b85f9f8a5546fc6501afea7a7a8e1869f9098bac 1212674 ruby1.9.1-dev_1.9.3.0-1ubuntu2.5_amd64.deb d5a1c480029d2a3bee19ceb7f75744a4e954091d 1796150 libtcltk-ruby1.9.1_1.9.3.0-1ubuntu2.5_amd64.deb Checksums-Sha256: 46c6775a181bb2743ffb2183662e83bf58dfbd2dc988a2eade6c3e9705be68dc 37010 ruby1.9.1_1.9.3.0-1ubuntu2.5_amd64.deb 544e5e9c997012cc530b796ff95301d0bd8b6dd31b244b75cd27176506a681d9 4101818 libruby1.9.1_1.9.3.0-1ubuntu2.5_amd64.deb 178c752b037b74aa58c22a166da37c6287f022ff3e8c048da7648346a27bbf7d 3396998 libruby1.9.1-dbg_1.9.3.0-1ubuntu2.5_amd64.deb c090d8f22a4b77181bd3b6a8311229d73364d06eb5007686c0645587ad7a862f 1212674 ruby1.9.1-dev_1.9.3.0-1ubuntu2.5_amd64.deb 1260d0c083085febc8767e5c78528f8d31d0158cc5c4e5c593d9cd4bfad71768 1796150 libtcltk-ruby1.9.1_1.9.3.0-1ubuntu2.5_amd64.deb Files: 19b6fed37041b7588942a3be2382fd6a 37010 ruby optional ruby1.9.1_1.9.3.0-1ubuntu2.5_amd64.deb 97c9c8247d28a8c25c077d3d329f9c1a 4101818 libs optional libruby1.9.1_1.9.3.0-1ubuntu2.5_amd64.deb 0c4add00704aeff075a6cecd7b377963 3396998 debug extra libruby1.9.1-dbg_1.9.3.0-1ubuntu2.5_amd64.deb c09541f4568a73e6c66fb2c643bff185 1212674 ruby optional ruby1.9.1-dev_1.9.3.0-1ubuntu2.5_amd64.deb 3e423d8dfb238ec5e53672b602f4a306 1796150 ruby optional libtcltk-ruby1.9.1_1.9.3.0-1ubuntu2.5_amd64.deb Original-Maintainer: akira yamada