Comment 8 for bug 23586

Message-Id: <email address hidden>
Date: Tue, 20 Sep 2005 21:47:14 -0700
From: akira yamada <email address hidden>
To: <email address hidden>
Subject: Bug#322346: fixed in ruby1.8 1.8.3-1

Source: ruby1.8
Source-Version: 1.8.3-1

We believe that the bug you reported is fixed in the latest version of
ruby1.8, which is due to be installed in the Debian FTP archive:

irb1.8_1.8.3-1_all.deb
  to pool/main/r/ruby1.8/irb1.8_1.8.3-1_all.deb
libdbm-ruby1.8_1.8.3-1_i386.deb
  to pool/main/r/ruby1.8/libdbm-ruby1.8_1.8.3-1_i386.deb
libgdbm-ruby1.8_1.8.3-1_i386.deb
  to pool/main/r/ruby1.8/libgdbm-ruby1.8_1.8.3-1_i386.deb
libopenssl-ruby1.8_1.8.3-1_i386.deb
  to pool/main/r/ruby1.8/libopenssl-ruby1.8_1.8.3-1_i386.deb
libreadline-ruby1.8_1.8.3-1_i386.deb
  to pool/main/r/ruby1.8/libreadline-ruby1.8_1.8.3-1_i386.deb
libruby1.8-dbg_1.8.3-1_i386.deb
  to pool/main/r/ruby1.8/libruby1.8-dbg_1.8.3-1_i386.deb
libruby1.8_1.8.3-1_i386.deb
  to pool/main/r/ruby1.8/libruby1.8_1.8.3-1_i386.deb
libtcltk-ruby1.8_1.8.3-1_i386.deb
  to pool/main/r/ruby1.8/libtcltk-ruby1.8_1.8.3-1_i386.deb
rdoc1.8_1.8.3-1_all.deb
  to pool/main/r/ruby1.8/rdoc1.8_1.8.3-1_all.deb
ri1.8_1.8.3-1_all.deb
  to pool/main/r/ruby1.8/ri1.8_1.8.3-1_all.deb
ruby1.8-dev_1.8.3-1_i386.deb
  to pool/main/r/ruby1.8/ruby1.8-dev_1.8.3-1_i386.deb
ruby1.8-elisp_1.8.3-1_all.deb
  to pool/main/r/ruby1.8/ruby1.8-elisp_1.8.3-1_all.deb
ruby1.8-examples_1.8.3-1_all.deb
  to pool/main/r/ruby1.8/ruby1.8-examples_1.8.3-1_all.deb
ruby1.8_1.8.3-1.diff.gz
  to pool/main/r/ruby1.8/ruby1.8_1.8.3-1.diff.gz
ruby1.8_1.8.3-1.dsc
  to pool/main/r/ruby1.8/ruby1.8_1.8.3-1.dsc
ruby1.8_1.8.3-1_i386.deb
  to pool/main/r/ruby1.8/ruby1.8_1.8.3-1_i386.deb
ruby1.8_1.8.3.orig.tar.gz
  to pool/main/r/ruby1.8/ruby1.8_1.8.3.orig.tar.gz

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to <email address hidden>,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
akira yamada <email address hidden> (supplier of updated ruby1.8 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing <email address hidden>)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Wed, 21 Sep 2005 12:43:50 +0900
Source: ruby1.8
Binary: libtcltk-ruby1.8 libruby1.8-dbg rdoc1.8 libgdbm-ruby1.8 ruby1.8-dev ruby1.8-elisp ruby1.8-examples libdbm-ruby1.8 irb1.8 ruby1.8 libreadline-ruby1.8 libopenssl-ruby1.8 libruby1.8 ri1.8
Architecture: source i386 all
Version: 1.8.3-1
Distribution: unstable
Urgency: high
Maintainer: akira yamada <email address hidden>
Changed-By: akira yamada <email address hidden>
Description:
 irb1.8 - Interactive Ruby (for Ruby 1.8)
 libdbm-ruby1.8 - DBM interface for Ruby 1.8
 libgdbm-ruby1.8 - GDBM interface for Ruby 1.8
 libopenssl-ruby1.8 - OpenSSL interface for Ruby 1.8
 libreadline-ruby1.8 - Readline interface for Ruby 1.8
 libruby1.8 - Libraries necessary to run Ruby 1.8
 libruby1.8-dbg - Debugging libraries for Ruby 1.8
 libtcltk-ruby1.8 - Tcl/Tk interface for Ruby 1.8
 rdoc1.8 - Generate documentation from Ruby source files (for Ruby 1.8)
 ri1.8 - Ruby Interactive reference (for Ruby 1.8)
 ruby1.8 - Interpreter of object-oriented scripting language Ruby 1.8
 ruby1.8-dev - Header files for compiling extension modules for the Ruby 1.8
 ruby1.8-elisp - ruby-mode for Emacsen
 ruby1.8-examples - Examples for Ruby 1.8
Closes: 321189 322345 322346 326331
Changes:
 ruby1.8 (1.8.3-1) unstable; urgency=high
 .
   * akira yamada <email address hidden>
   - new upsptream version 1.8.3.
       - [security] JVN#62914675 CVE-2005-2337
           - preserve safe level in the environment where a method is defined.
           - prohibit calling tainted method (>2) when $SAFE == 0.
       - must not switch contexts during re-allocating stack.
         [ruby-core:05219]
       - fix parsing backslashes following \c in regexp. [ruby-dev:26500]
       - webrick: sockets should be non-blocking mode. [ruby-dev:26405]
       - drb: use private_methods and protected_methods instead of respond_to?
         to check method visibility. [ruby-dev:26616]
       - propagate the exception caused thread termination directly.
         [ruby-core:05552] (closes: #322346)
       - lib/logger.rb (write, shift_log?, shift_log): file shifting race
         condition bug fixed. [ruby-dev:26764]
       - should return proper arity value. [ruby-dev:26390]
       - make irb -I option that is same befavior for ruby.
         [ruby-dev:26872][ruby-dev: 26920] (closes: #322345)
       - irb: should not treat plain zero as an octal number. [ruby-dev:26410]
         (closes: #321189)
   - removed debian/patches/802_xmlrpc_util.rb.patch
     debian/patches/803_runruby.rb_loadpath.patch:
       - included into upstream.
   - debian/control: build-depends on libreadline5-dev. (closes: #326331)
Files:
 03d974becbe04b411023fa5cd98a5484 1011 interpreters optional ruby1.8_1.8.3-1.dsc
 e59d9e7392575b94a1c5531063e8d1b1 4223460 interpreters optional ruby1.8_1.8.3.orig.tar.gz
 8ba6177ec6a7f6a64310e887e907afe6 30573 interpreters optional ruby1.8_1.8.3-1.diff.gz
 719e2b85020b5443bee5449ad89d0b94 177098 interpreters optional ruby1.8_1.8.3-1_i386.deb
 4cdcd242373a317d68e251645e67ad9c 1406782 libs optional libruby1.8_1.8.3-1_i386.deb
 aed3a57f99f93bfd8428b1a584548aa5 875722 libdevel extra libruby1.8-dbg_1.8.3-1_i386.deb
 7502aa0b06de0fcd71266cbd3ebd0b17 655028 devel optional ruby1.8-dev_1.8.3-1_i386.deb
 b829dc8cee7a43205956504bd8c9cf8b 157158 interpreters optional libdbm-ruby1.8_1.8.3-1_i386.deb
 90be0bae4f6586af2a0e3293b6318aec 157728 interpreters optional libgdbm-ruby1.8_1.8.3-1_i386.deb
 2da05224f0e42c7f54bf18d81d6926e6 157510 interpreters optional libreadline-ruby1.8_1.8.3-1_i386.deb
 f4ee314dca3d7c609106f6433d922dc0 1729316 interpreters optional libtcltk-ruby1.8_1.8.3-1_i386.deb
 0b20ca840eea0bff42cafbe60f1d1f1b 247862 interpreters optional libopenssl-ruby1.8_1.8.3-1_i386.deb
 edf064775dcbe9de41d6c294ed3bd646 202394 interpreters optional ruby1.8-examples_1.8.3-1_all.deb
 559044864afd35ae8fbc923fe39f353b 170356 interpreters optional ruby1.8-elisp_1.8.3-1_all.deb
 fb123a351bbc1ab68b0ba4792f24716f 713458 interpreters optional ri1.8_1.8.3-1_all.deb
 954402631d87ee940fde90b117d60776 260320 doc optional rdoc1.8_1.8.3-1_all.deb
 7050b573f589aa4f36ec67d308e9a91d 195326 interpreters optional irb1.8_1.8.3-1_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFDMNyMXzkxpuIT8aARAgpeAJ0aIqAJkuel4LSHahyWxZqSbZ6HnACffIyj
Y0V5VFyisiSQYuXOxvtBpcc=
=lTFX
-----END PGP SIGNATURE-----