Accepted ruby2.1 2.1.5-2+deb8u8 (source amd64 all) into oldoldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 25 Nov 2019 19:03:02 +0100
Source: ruby2.1
Binary: ruby2.1 libruby2.1 ruby2.1-dev ruby2.1-doc ruby2.1-tcltk
Architecture: source amd64 all
Version: 2.1.5-2+deb8u8
Distribution: jessie-security
Urgency: medium
Maintainer: Antonio Terceiro <terceiro@debian.org>
Changed-By: Thorsten Alteholz <debian@alteholz.de>
Description:
libruby2.1 - Libraries necessary to run Ruby 2.1
ruby2.1 - Interpreter of object-oriented scripting language Ruby
ruby2.1-dev - Header files for compiling extension modules for the Ruby 2.1
ruby2.1-doc - Documentation for Ruby 2.1
ruby2.1-tcltk - Ruby/Tk for Ruby 2.1
Changes:
ruby2.1 (2.1.5-2+deb8u8) jessie-security; urgency=medium
.
* Non-maintainer upload by the LTS Team.
* CVE-2019-15845
path matching might pass in File.fnmatch and File.fnmatch? due
to a NUL character injection
* CVE-2019-16201
A loop caused by a wrong regular expression could lead to a denial
of service of a WEBrick service.
* CVE-2019-16254
This is the same issue as CVE-2017-17742, whose fix was not complete.
* CVE-2019-16255
Giving untrusted data to the first argument of Shell#[] and Shell#test
might lead to a code injection vulnerability.
Checksums-Sha1:
1bc43e6f0451eddf3e974a76bc6dce9d5ecccfba 2610 ruby2.1_2.1.5-2+deb8u8.dsc
4c70a84f0e88f553235b3e0c2619c193251d4652 8026484 ruby2.1_2.1.5.orig.tar.xz
7071bce4c4a9e85e96a4f24ce1644883178d0238 124272 ruby2.1_2.1.5-2+deb8u8.debian.tar.xz
576df30f325f4321c2fcd18773fdc9efd55dda83 277848 ruby2.1_2.1.5-2+deb8u8_amd64.deb
c6ac517c34073f46032eacabb681cdfc26594d0a 3285742 libruby2.1_2.1.5-2+deb8u8_amd64.deb
1ddd56d3516ec968fe40732681ccb5330a94b0d1 1103980 ruby2.1-dev_2.1.5-2+deb8u8_amd64.deb
1ee5f39a56d094f00b553f658dd620105ad47bb0 3378216 ruby2.1-doc_2.1.5-2+deb8u8_all.deb
a40d5b05aa8151df86f7df1f59ff2e89291ec09f 479828 ruby2.1-tcltk_2.1.5-2+deb8u8_amd64.deb
Checksums-Sha256:
1ab23b0495fa90c7f43d4f8024a8ad8c126b49ac5d0493e96d85ab847487758d 2610 ruby2.1_2.1.5-2+deb8u8.dsc
0f8d9b15b38ee8b9a59dd9504404789cd8941da2c3ea079535e24f95e0f7ddc1 8026484 ruby2.1_2.1.5.orig.tar.xz
f5361aebeac9b13656d7ba71f53c7ccc4986ae1d38e0729884c270954cde9da5 124272 ruby2.1_2.1.5-2+deb8u8.debian.tar.xz
466b874730d89482a103a3889b54ee94974cdeb80dbb6c86f2431accf33fcd8e 277848 ruby2.1_2.1.5-2+deb8u8_amd64.deb
977b918e6e52de8fdc4c2ae4be9104cae3fc69f551ef97bbc3c7eac582d1baa7 3285742 libruby2.1_2.1.5-2+deb8u8_amd64.deb
e870fd505f239ab6b5d3750f9b2f8ffa313cb23c95596a55d8fba8162131f5ff 1103980 ruby2.1-dev_2.1.5-2+deb8u8_amd64.deb
fa19885f940f3d254228601654878e3f03bcb30a4011bda969c8835a6b08a43b 3378216 ruby2.1-doc_2.1.5-2+deb8u8_all.deb
2ddd35302d7972d40c54c9daaaa1084278af59f466bc60773874acdf984876e6 479828 ruby2.1-tcltk_2.1.5-2+deb8u8_amd64.deb
Files:
c35575f892d09953af26a0ea3cb87e76 2610 ruby extra ruby2.1_2.1.5-2+deb8u8.dsc
1fe7f8fe73a3deba9363f391c1083e94 8026484 ruby extra ruby2.1_2.1.5.orig.tar.xz
126db2400d0c84792d514b04acde10b5 124272 ruby extra ruby2.1_2.1.5-2+deb8u8.debian.tar.xz
f16fd64bdc5e97c2a3b284607fbf354a 277848 ruby extra ruby2.1_2.1.5-2+deb8u8_amd64.deb
ff6c36997035d8d9435117d95a70be74 3285742 libs extra libruby2.1_2.1.5-2+deb8u8_amd64.deb
61b26421fdb5480ff93df8917849bbd7 1103980 ruby extra ruby2.1-dev_2.1.5-2+deb8u8_amd64.deb
8a3d9689e32395f884e2ebd702e5557a 3378216 doc extra ruby2.1-doc_2.1.5-2+deb8u8_all.deb
6271ef8f2b2750bafd8592059f5626df 479828 ruby extra ruby2.1-tcltk_2.1.5-2+deb8u8_amd64.deb
-----BEGIN PGP SIGNATURE-----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=vni6
-----END PGP SIGNATURE-----