Back to jruby PTS page

Accepted jruby 9.1.17.0-3+deb10u1 (source) into oldstable



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 30 Apr 2023 20:10:09 +0300
Source: jruby
Architecture: source
Version: 9.1.17.0-3+deb10u1
Distribution: buster-security
Urgency: medium
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Adrian Bunk <bunk@debian.org>
Changes:
 jruby (9.1.17.0-3+deb10u1) buster-security; urgency=medium
 .
   * Non-maintainer upload by the LTS Security Team.
   * CVE-2017-17742, CVE-2019-16254: HTTP Response Splitting attacks
     in the HTTP server of WEBrick.
   * CVE-2019-16201: Regular Expression Denial of Service vulnerability
     of WEBrick's Digest access authentication.
   * CVE-2019-16255: Code injection vulnerability of Shell#[]
     and Shell#test.
   * CVE-2020-25613: HTTP Request Smuggling attack in WEBrick.
   * CVE-2021-31810: Trusting FTP PASV responses vulnerability in Net::FTP.
   * CVE-2021-32066: Net::IMAP did not raise an exception when StartTLS
     fails with an an unknown response.
   * CVE-2023-28755: Quadratic backtracking on invalid URI.
   * CVE-2023-28756: The Time parser mishandled invalid strings that have
     specific characters.
Checksums-Sha1:
 c6e6df97ee2e72def6a0b508b1be727d3254c144 3078 jruby_9.1.17.0-3+deb10u1.dsc
 3b1c96fa63efdd22070742d8a8e17a3afe3bd42a 8574514 jruby_9.1.17.0.orig.tar.gz
 a176266577b2115affa0534a3661aa2021730e60 87420 jruby_9.1.17.0-3+deb10u1.debian.tar.xz
Checksums-Sha256:
 85841b126b38977165b2263fa063b80ef145f4a48c43818950a60a166890cb9b 3078 jruby_9.1.17.0-3+deb10u1.dsc
 b66d7c14f85075afdabb5ebf5950804c5a5d5c1d05ab833f580f04ee709b5773 8574514 jruby_9.1.17.0.orig.tar.gz
 87633c2fbec3afdfaa764eb9f9aa21c778dbcbd6100a03e0ecd01a1f6b6c6741 87420 jruby_9.1.17.0-3+deb10u1.debian.tar.xz
Files:
 e74c86956e7afe718b6180c92b32e999 3078 ruby optional jruby_9.1.17.0-3+deb10u1.dsc
 38fe13908af7fe67d32f0c62f4d42746 8574514 ruby optional jruby_9.1.17.0.orig.tar.gz
 e45613a4a5cb0779782ab10235919610 87420 ruby optional jruby_9.1.17.0-3+deb10u1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=gHod
-----END PGP SIGNATURE-----