ruby1.9.1 (1.9.3.194-8.1ubuntu1.2) raring-security; urgency=low
* SECURITY UPDATE: safe level restriction bypass via DL and Fiddle
- debian/patches/CVE-2013-2065.patch: perform taint checking in
ext/dl/lib/dl/func.rb, ext/fiddle/function.c.
- CVE-2013-2065
* SECURITY UPDATE: denial of service and possible code execution via
heap overflow in floating point parsing.
- debian/patches/CVE-2013-4164.patch: check lengths in util.c, added
test to test/ruby/test_float.rb.
- CVE-2013-4164
Date: 2013-11-26 17:53:14.708930+00:00
Changed-By: Marc Deslauriers <[email protected]>
Signed-By: Ubuntu Archive Robot
<[email protected]>
https://launchpad.net/ubuntu/raring/+source/ruby1.9.1/1.9.3.194-8.1ubuntu1.2
Sorry, changesfile not available.
--
Raring-changes mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/raring-changes