This bug was fixed in the package ruby1.8 - 1.8.7.358-6ubuntu1 --------------- ruby1.8 (1.8.7.358-6ubuntu1) raring; urgency=low
* SECURITY UPDATE: Safe level bypass (LP: #1077223) - debian/patches/CVE-2012-4466.patch: Remove incorrect string taint in exception handling method. Based on upstream patch. - CVE-2012-4466 -- Tyler Hicks <tyhi...@canonical.com> Fri, 09 Nov 2012 14:56:55 -0800 ** Changed in: ruby1.8 (Ubuntu) Status: Fix Committed => Fix Released ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2012-4466 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1077223 Title: CVE-2012-4466 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ruby1.8/+bug/1077223/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs