[ubuntu/raring-updates] ruby1.9.1 1.9.3.194-8.1ubuntu1.2 (Accepted)

Ubuntu Archive Robot cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk
Wed Nov 27 16:58:29 UTC 2013


ruby1.9.1 (1.9.3.194-8.1ubuntu1.2) raring-security; urgency=low

  * SECURITY UPDATE: safe level restriction bypass via DL and Fiddle
    - debian/patches/CVE-2013-2065.patch: perform taint checking in
      ext/dl/lib/dl/func.rb, ext/fiddle/function.c.
    - CVE-2013-2065
  * SECURITY UPDATE: denial of service and possible code execution via
    heap overflow in floating point parsing.
    - debian/patches/CVE-2013-4164.patch: check lengths in util.c, added
      test to test/ruby/test_float.rb.
    - CVE-2013-4164

Date: 2013-11-26 17:53:14.708930+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: Ubuntu Archive Robot <cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk>
https://launchpad.net/ubuntu/raring/+source/ruby1.9.1/1.9.3.194-8.1ubuntu1.2
-------------- next part --------------
Sorry, changesfile not available.


More information about the Raring-changes mailing list