Bug#690670: ruby1.9.1: CVE-2012-4522

2012-10-16 Thread Antonio Terceiro
Moritz Muehlenhoff escreveu: > Package: ruby1.9.1 > Severity: grave > Tags: security > Justification: user security hole > > Please see > http://www.ruby-lang.org/en/news/2012/10/12/poisoned-NUL-byte-vulnerability/ > > The advisory doesn't mention Ruby 1.8, can you please double-check, whether

Bug#690670: ruby1.9.1: CVE-2012-4522

2012-10-16 Thread Moritz Muehlenhoff
Package: ruby1.9.1 Severity: grave Tags: security Justification: user security hole Please see http://www.ruby-lang.org/en/news/2012/10/12/poisoned-NUL-byte-vulnerability/ The advisory doesn't mention Ruby 1.8, can you please double-check, whether it is affected? Cheers, Moritz -- T