Ubuntu
ruby2.3 package

ruby2.3 2.3.3-1ubuntu1.4 source package in Ubuntu

Changelog

ruby2.3 (2.3.3-1ubuntu1.4) artful-security; urgency=medium

  * SECURITY UPDATE: Directory traversal
    - debian/patches/CVE-2018-1000073.patch: fix in
      lib/rubygems/package.rb.
    - CVE-2018-1000073
  * SECURITY UPDATE: Deserialization untrusted data
    - debian/patches/CVE-2018-1000074.patch fix in
      lib/rubygems/commands/owner_command.rb,
      test/rubygems/test_gem_commands_owner_command.rb.
    - CVE-2018-1000074
  * SECURITY UPDATE: Infinite loop
    - debian/patches/CVE-2018-1000075.patch: fix in
      lib/rubygems/package/tar_header.rb,
      test/rubygems/test_gem_package_tar_header.rb.
    - CVE-2018-1000075
  * SECURITY UPDATE: Improper verification of crypto
    signature
    - debian/patches/CVE-2018-1000076.patch: fix in
      lib/rubygems/package.rb, lib/rubygems/pacage/tar_writer.rb,
      test/rubygems/test_gem_pacakge.rg
    - CVE-2018-1000076
  * SECURITY UPDATE: Validation vulnerability
    - debian/patches/CVE-2018-1000077.patch: fix in
      lib/rubygems/specification.rb,
      test/rubygems/test_gem_specification.rb.
    - CVE-2018-1000077
  * SECURITY UPDATE: Cross site scripting
    - debian/patches/CVE-2018-1000078.patch: fix in
      lib/rubygems/server.rb.
    - CVE-2018-1000078
  * SECURITY UPDATE: Directory traversal
    - debian/patches/CVE-2018-1000079.patch: fix in
      lib/rubygems/package.rb.
    - CVE-2018-1000079

 -- <email address hidden> (Leonidas S. Barbosa)  Wed, 04 Apr 2018 13:23:52 -0300

Upload details

Uploaded by:
Leonidas S. Barbosa
Uploaded to:
Artful
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
ruby
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
ruby2.3_2.3.3.orig.tar.xz 8.0 MiB 799796bb740832c7257f45089fdbd9cd57686cac033f88d0b078063b6d3d77ad
ruby2.3_2.3.3-1ubuntu1.4.debian.tar.xz 107.5 KiB b210ceefaa7cbfd306957763f6ae0cb673a8dd7cf590503500dbdd13dcf1043f
ruby2.3_2.3.3-1ubuntu1.4.dsc 2.5 KiB f3accd85756d438296ca1c2041d58fe379b934921c0092924f07c41a4bc108da

View changes file

Binary packages built by this source

libruby2.3: No summary available for libruby2.3 in ubuntu artful.

No description available for libruby2.3 in ubuntu artful.

libruby2.3-dbgsym: No summary available for libruby2.3-dbgsym in ubuntu artful.

No description available for libruby2.3-dbgsym in ubuntu artful.

ruby2.3: No summary available for ruby2.3 in ubuntu artful.

No description available for ruby2.3 in ubuntu artful.

ruby2.3-dbgsym: No summary available for ruby2.3-dbgsym in ubuntu artful.

No description available for ruby2.3-dbgsym in ubuntu artful.

ruby2.3-dev: No summary available for ruby2.3-dev in ubuntu artful.

No description available for ruby2.3-dev in ubuntu artful.

ruby2.3-doc: No summary available for ruby2.3-doc in ubuntu artful.

No description available for ruby2.3-doc in ubuntu artful.

ruby2.3-tcltk: No summary available for ruby2.3-tcltk in ubuntu artful.

No description available for ruby2.3-tcltk in ubuntu artful.

ruby2.3-tcltk-dbgsym: No summary available for ruby2.3-tcltk-dbgsym in ubuntu artful.

No description available for ruby2.3-tcltk-dbgsym in ubuntu artful.