[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-Id: <200808111906.10893.steffen.joeris@skolelinux.de>
Date: Mon, 11 Aug 2008 19:06:10 +1000
From: Steffen Joeris <steffen.joeris@...lelinux.de>
To: oss-security@...ts.openwall.com
Subject: CVE id requests: ruby
Hi
It seems that there was another ruby release, which addresses some security
fixes.
I guess the new ones are:
* Several vulnerabilities in safe level
* DoS vulnerability in WEBrick
* Lack of taintness check in dl
I didn't check their exploitability, but it might be good to have CVE ids for
them anyway.
Upstream page:
http://www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/
Debian Bug report:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494401
Cheers
Steffen
Download attachment "signature.asc " of type "application/pgp-signature" (198 bytes)
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
