Package: libruby1.8
Version: 1.8.7.358-8
Severity: serious
File: ruby1.8

There are already three Ruby releases in Jessie.

Also quoting from 
https://www.ruby-lang.org/en/news/2013/11/22/heap-overflow-in-floating-point-parsing-cve-2013-4164/
 :

| Please note that Ruby 1.8 series or any earlier releases are already 
obsoleted. There is no
| plan to release new FIXED versions for them. Users of such versions are 
advised to upgrade
| as soon as possible as we cannot guarantee the continued availability of 
security fixes for
| unsupported releases.

So ruby1.8 should be removed for jessie.

Cheers,
        Moritz


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to