~ubuntu-branches/ubuntu/raring/ruby1.9.1/raring-security

Viewing all changes in revision 29.

  • Committer: Package Import Robot
  • Author(s): Marc Deslauriers
  • Date: 2013-11-26 11:36:50 UTC
  • Revision ID: package-import@ubuntu.com-20131126113650-ubvq24vo78lqw7pd
Tags: 1.9.3.194-8.1ubuntu1.2
* SECURITY UPDATE: safe level restriction bypass via DL and Fiddle
  - debian/patches/CVE-2013-2065.patch: perform taint checking in
    ext/dl/lib/dl/func.rb, ext/fiddle/function.c.
  - CVE-2013-2065
* SECURITY UPDATE: denial of service and possible code execution via
  heap overflow in floating point parsing.
  - debian/patches/CVE-2013-4164.patch: check lengths in util.c, added
    test to test/ruby/test_float.rb.
  - CVE-2013-4164

expand all expand all

Show diffs side-by-side

added added

removed removed

Lines of Context: