package: ruby1.8
severity: important
tags: security

Hi,

 Probably you know, but there is not a post in BTS, so I'll do.
 As security-tracker describes Ruby before 1.8.7-p357 has hash DoS problem.
 http://security-tracker.debian.org/tracker/CVE-2011-4815

 And today I notice that Ret Hat guys pushed a fix for that.
 https://bugzilla.redhat.com/show_bug.cgi?id=750564


 So, please
 - For Squeeze (and Lenny): apply (and adjust) security patch
 - For Wheezy and Sid: push 1.8.7-p357 package

 Thanks.

-- 
Hideki Yamane



--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to