Processing commands for [EMAIL PROTECTED]:
> found 496808 1.8.7.22-3
Bug#496808: ruby1.8: DoS vulnerability in rexml parsing module
Bug marked as found in version 1.8.7.22-3.
> clone 496808 -1
Bug#496808: ruby1.8: DoS vulnerability in rexml parsing module
Bug 496808 cloned as bug
On Wednesday 27 August 2008 17:56, Frank Louwers wrote:
> The rexml lib is vulnerable to a DoS attack.
> Please see
> http://www.ruby-lang.org/en/news/2008/08/23/dos-vulnerability-in-rexml/.
This is CVE-2008-3790. Please mention it in the package changelog on uploads.
Thijs
pgpish8KyIIkh.pgp
Package: ruby1.8
Version: 1.8.5-4etch2
Severity: grave
Tags: security
Justification: user security hole
The rexml lib is vulnerable to a DoS attack.
Please see
http://www.ruby-lang.org/en/news/2008/08/23/dos-vulnerability-in-rexml/.
I know there isn't an official patch yet (except the overloadi
3 matches
Mail list logo