package: ruby1.8 severity: important tags: security Hi,
Probably you know, but there is not a post in BTS, so I'll do. As security-tracker describes Ruby before 1.8.7-p357 has hash DoS problem. http://security-tracker.debian.org/tracker/CVE-2011-4815 And today I notice that Ret Hat guys pushed a fix for that. https://bugzilla.redhat.com/show_bug.cgi?id=750564 So, please - For Squeeze (and Lenny): apply (and adjust) security patch - For Wheezy and Sid: push 1.8.7-p357 package Thanks. -- Hideki Yamane -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org