*** This bug is a security vulnerability ***

You have been subscribed to a public security bug by Jamie Strandboge 
(jdstrand):

Binary package hint: libruby1.8

There is a new vulnerability in Ruby reported over the weekend.

http://www.ruby-lang.org/en/news/2008/08/23/dos-vulnerability-in-rexml/

There is a monkey patch fix available (http://www.ruby-
lang.org/security/20080823rexml/rexml-expansion-fix.rb) but it really
needs to go in the libraries.

1.8 series

    * 1.8.6-p287 and all prior versions
    * 1.8.7-p72 and all prior versions

1.9 series

    * all versions

** Affects: ruby1.8 (Ubuntu)
     Importance: Undecided
         Status: New

-- 
DOS Vulnerability in Ruby REXML
https://bugs.launchpad.net/bugs/261459
You received this bug notification because you are a member of Ubuntu Bugs, 
which is a direct subscriber.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to