Package: jruby
Severity: grave
Tags: security
Justification: user security hole

Hi,
jruby in Wheezy is still affected by 
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4838                     
                                                                       
http://www.nruns.com/_downloads/advisory28122011.pdf                            
                                                                                
                            

Since Wheezy already has 1.6.5, updating to 1.6.5.1 seems like a good idea?

Cheers,
        Moritz


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to