Accepted ruby2.3 2.3.3-1+deb9u4 (source) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sun, 28 Oct 2018 21:49:57 +0100
Source: ruby2.3
Binary: ruby2.3 libruby2.3 ruby2.3-dev ruby2.3-doc ruby2.3-tcltk
Architecture: source
Version: 2.3.3-1+deb9u4
Distribution: stretch-security
Urgency: high
Maintainer: Antonio Terceiro <terceiro@debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
libruby2.3 - Libraries necessary to run Ruby 2.3
ruby2.3 - Interpreter of object-oriented scripting language Ruby
ruby2.3-dev - Header files for compiling extension modules for the Ruby 2.3
ruby2.3-doc - Documentation for Ruby 2.3
ruby2.3-tcltk - Ruby/Tk for Ruby 2.3
Changes:
ruby2.3 (2.3.3-1+deb9u4) stretch-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* OpenSSL::X509::Name equality check does not work correctly
(CVE-2018-16395)
* pack.c: avoid returning uninitialized String
* Tainted flags are not propagated in Array#pack and String#unpack with some
directives (CVE-2018-16396)
Checksums-Sha1:
6d8abde85a67ab7598e37cde6bf7b8140ad70d73 2503 ruby2.3_2.3.3-1+deb9u4.dsc
b270d57de661e0dcc920bb21882346896ee254ef 116076 ruby2.3_2.3.3-1+deb9u4.debian.tar.xz
7cdbd9cfb1fd7786b5aa4c9f815f6faa620016f5 7373 ruby2.3_2.3.3-1+deb9u4_source.buildinfo
Checksums-Sha256:
5e0b7caae97cfd75318e57e8c351c6e8465a559de91ece6a431b06d951a20e2d 2503 ruby2.3_2.3.3-1+deb9u4.dsc
6227ad54e54bcb4b6d7c542a4f9af1adc3f27bef862e927096a7697cdb7d461d 116076 ruby2.3_2.3.3-1+deb9u4.debian.tar.xz
f19915f030128c2b9cc20076bc03f5daf01954c8e3969c1a15387b718e83dd50 7373 ruby2.3_2.3.3-1+deb9u4_source.buildinfo
Files:
0029188c7e6e25b8ca11e11db579a65c 2503 ruby optional ruby2.3_2.3.3-1+deb9u4.dsc
b8bc4dba304c0307113d4403abde8d88 116076 ruby optional ruby2.3_2.3.3-1+deb9u4.debian.tar.xz
011d4112e7ef297fe619ae397b6512cd 7373 ruby optional ruby2.3_2.3.3-1+deb9u4_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCAAdFiEEst7mYDbECCn80PEM/A2xu81GC94FAlvZvIQACgkQ/A2xu81G
C96Q8RAA52UqgzWujgPHi3NMaXfzydnsl98s5oNRwDzP1dvpVNZZ9ZhT5gE6+dlu
fEeOK2uxoXInhyTu59QvM2HUJ/tCtiLSpv3uZ1ddVlgY6DMx40Yp0qUpMpsxsLkB
wMGpuCgvzuI96snJfFkGF13cQXCoT57LbcIxpEu5gI9gFjzKaIB5PE6Swk83OVMH
sOmXUX4vXkCYG8qAwv8qAs4TAHOnrd0CqwDD5Uqbks6uaIc6SL2IKCWYZVQQRFva
UZxrMl07OE36PUwTUUZoYhFQnN1WK98Gz5UyMeD+prliA+q2Ei5viW1wmtLxX0cJ
kxm4JO6kOL+fQiNxjebaFu3eMTnUELhZHb0GVDSSBn0IOzgl/+xIxB2/FIOHxlgO
OPHGP9WHlkvIPmgW6koNCvXTLxcq7gtcha02pYRQtG+KZgaM86VWlBgJrRozrZos
y9PVIdqSswxTMVzcEZhYWUWl6nOhMU7Qa1MCiQB9nfOOXAmYHvsAhL4b7QLtSS5K
T5Vt+a5Wx9MbXes6AE+qIogoe5wFvKdapAWF/Ft3WrygVpzsocyfp7OubdP97UzA
GRZZiXuEfVpByb9asWoO0gbshwG9w7ZOholzZYwfA+edZYH4Re3EhBPIQFHGsTxe
x/hEwer1QXOv3+7Hjm7hqwhxF7OO3ebNo1RWf73ePRLtqmhEEZQ=
=1d6W
-----END PGP SIGNATURE-----