Bug#882724: stretch-pu: package ruby-ox/2.1.1-2+b6

To: 882724@bugs.debian.org
Cc: Cédric Boutillier <boutil@debian.org>
Subject: Bug#882724: stretch-pu: package ruby-ox/2.1.1-2+b6
From: "Adam D. Barratt" <adam@adam-barratt.org.uk>
Date: Wed, 29 Nov 2017 09:08:11 +0000
Message-id: <[🔎] 90e4eaa5d8680c025cb2f009d68c135f@mail.adam-barratt.org.uk>
Reply-to: "Adam D. Barratt" <adam@adam-barratt.org.uk>, 882724@bugs.debian.org
In-reply-to: <[🔎] 1511704185.2600.25.camel@adam-barratt.org.uk>
References: <[🔎] 151165617660.26449.15396416969854109932.reportbug@esfahan> <[🔎] 151165617660.26449.15396416969854109932.reportbug@esfahan> <[🔎] 1511704185.2600.25.camel@adam-barratt.org.uk> <[🔎] 151165617660.26449.15396416969854109932.reportbug@esfahan>

Control: tags -1 + pending

On 2017-11-26 13:49, Adam D. Barratt wrote:

Control: tags -1 + confirmed

On Sun, 2017-11-26 at 01:29 +0100, Cédric Boutillier wrote:

this update fixes bug #881445 [CVE-2017-15928]
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=881445
by cherrypicking a patch from upstream, to crash of the ruby
interpreter on a parse error.

Debdiff attached.


Please go ahead.


Uploaded and flagged for acceptance.

Regards,

Adam

Reply to:

References:
- Bug#882724: stretch-pu: package ruby-ox/2.1.1-2+b6
  - From: Cédric Boutillier <boutil@debian.org>
- Bug#882724: stretch-pu: package ruby-ox/2.1.1-2+b6
  - From: "Adam D. Barratt" <adam@adam-barratt.org.uk>

Prev by Date: Bug#882621: stretch-pu: package python2.7/2.7.13-2+deb9u2
Next by Date: Processed: Re: Bug#882724: stretch-pu: package ruby-ox/2.1.1-2+b6
Previous by thread: Bug#882724: stretch-pu: package ruby-ox/2.1.1-2+b6
Next by thread: Processed: Re: Bug#882724: stretch-pu: package ruby-ox/2.1.1-2+b6
Index(es):
- Date
- Thread