Sync ruby2.0 2.0.0.353-1 (main) from Debian unstable (main)
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| ruby2.0 (Ubuntu) |
Fix Released
|
Wishlist
|
Unassigned | ||
Bug Description
Please sync ruby2.0 2.0.0.353-1 (main) from Debian unstable (main)
Explanation of the Ubuntu delta and why it can be dropped:
* SECURITY UPDATE: denial of service and possible code execution via
heap overflow in floating point parsing.
- debian/
test to test/ruby/
- CVE-2013-4164
This CVE was fixed in the new upstream release, as noted in Debian's changelog.
Changelog entries since current trusty version 2.0.0.343-1ubuntu1:
ruby2.0 (2.0.0.353-1) unstable; urgency=low
* New upstream release
+ Includes fix for Heap Overflow in Floating Point Parsing (CVE-2013-4164)
Closes: #730190
-- Antonio Terceiro <email address hidden> Mon, 25 Nov 2013 22:34:25 -0300
CVE References
| Changed in ruby2.0 (Ubuntu): | |
| importance: | Undecided → Wishlist |
| Marc Deslauriers (mdeslaur) wrote | #1 |
| Changed in ruby2.0 (Ubuntu): | |
| status: | New → Fix Released |
This bug was fixed in the package ruby2.0 - 2.0.0.353-1
Sponsored for Logan Rosen (logan)
---------------
ruby2.0 (2.0.0.353-1) unstable; urgency=low
* New upstream release
+ Includes fix for Heap Overflow in Floating Point Parsing (CVE-2013-4164)
Closes: #730190
-- Antonio Terceiro <email address hidden> Mon, 25 Nov 2013 22:34:25 -0300