Ubuntu
ruby2.0 package

ruby2.0 2.0.0.484-1ubuntu2.4 source package in Ubuntu

Changelog

ruby2.0 (2.0.0.484-1ubuntu2.4) trusty-security; urgency=medium

  * SECURITY UPDATE: incorrect hostname matching
    - debian/patches/CVE-2015-1855.patch: implement stricter hostname
      validation per RFC 6125 in ext/openssl/lib/openssl/ssl.rb, added
      tests to test/openssl/test_ssl.rb.
    - CVE-2015-1855
  * SECURITY UPDATE: DoS and possible code execution in Fiddle::Handle
    - debian/patches/CVE-2015-7551.patch: check tainted string arguments in
      ext/fiddle/handle.c, added tests to test/fiddle/test_handle.rb.
    - CVE-2015-7551
  * SECURITY UPDATE: SMTP command injection
    - debian/patches/CVE-2015-9096.patch: don't allow bare CR or LF in
      lib/net/smtp.rb, added test to test/net/smtp/test_smtp.rb.
    - CVE-2015-9096
  * SECURITY UPDATE: type confusion in tcltkip
    - debian/patches/CVE-2016-2337.patch: check argument in
      ext/tk/tcltklib.c.
    - CVE-2016-2337
  * SECURITY UPDATE: heap overflow in Fiddle::Function.new
    - debian/patches/CVE-2016-2339.patch: check arguments in
      ext/fiddle/function.c.
    - CVE-2016-2339
  * SECURITY UPDATE: use of same initialization vector (IV)
    - debian/patches/CVE-2016-7798.patch: don't set dummy key in
      ext/openssl/ossl_cipher.c, added test to test/openssl/test_cipher.rb.
    - CVE-2016-7798
  * debian/rules: add note on enabling the full test suite
  * debian/patches/fix_tests.patch: fix some broken tests.

 -- Marc Deslauriers <email address hidden>  Tue, 20 Jun 2017 07:58:57 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Trusty
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
ruby
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
ruby2.0_2.0.0.484.orig.tar.xz 6.7 MiB 9184719e59df0f61aa29dace2879ce516293ac82812c8686e3e9f49cbf0b5d50
ruby2.0_2.0.0.484-1ubuntu2.4.debian.tar.gz 99.9 KiB e5dca9dbb5ddecb74abf10def55e799d1ec460b624f7b9bc1e492827d535efb2
ruby2.0_2.0.0.484-1ubuntu2.4.dsc 2.4 KiB caf0c6d6d736389ea0d14234369e492f4c7cfc16ed71c8d10a77595ab9c4d925

View changes file

Binary packages built by this source

libruby2.0: Libraries necessary to run Ruby 2.0

 Ruby is the interpreted scripting language for quick and easy
 object-oriented programming. It has many features to process text
 files and to do system management tasks (as in perl). It is simple,
 straight-forward, and extensible.
 .
 This package includes the 'libruby-2.0' library, necessary to run Ruby 2.0.
 (API version 2.0.0)

libruby2.0-dbgsym: debug symbols for package libruby2.0

 Ruby is the interpreted scripting language for quick and easy
 object-oriented programming. It has many features to process text
 files and to do system management tasks (as in perl). It is simple,
 straight-forward, and extensible.
 .
 This package includes the 'libruby-2.0' library, necessary to run Ruby 2.0.
 (API version 2.0.0)

ruby2.0: Interpreter of object-oriented scripting language Ruby

 Ruby is the interpreted scripting language for quick and easy
 object-oriented programming. It has many features to process text
 files and to do system management tasks (as in perl). It is simple,
 straight-forward, and extensible.
 .
 In the name of this package, `2.0' indicates the Ruby library compatibility
 version. This package currently provides the `2.0.x' branch of Ruby.

ruby2.0-dbgsym: debug symbols for package ruby2.0

 Ruby is the interpreted scripting language for quick and easy
 object-oriented programming. It has many features to process text
 files and to do system management tasks (as in perl). It is simple,
 straight-forward, and extensible.
 .
 In the name of this package, `2.0' indicates the Ruby library compatibility
 version. This package currently provides the `2.0.x' branch of Ruby.

ruby2.0-dev: Header files for compiling extension modules for the Ruby 2.0

 Ruby is the interpreted scripting language for quick and easy
 object-oriented programming. It has many features to process text
 files and to do system management tasks (as in perl). It is simple,
 straight-forward, and extensible.
 .
 This package contains the header files and the mkmf library, necessary
 to make extension library for Ruby 2.0. It is also required to build
 many gems.

ruby2.0-doc: Documentation for Ruby 2.0

 Ruby is the interpreted scripting language for quick and easy
 object-oriented programming. It has many features to process text
 files and to do system management tasks (as in perl). It is simple,
 straight-forward, and extensible.
 .
 This package contains the autogenerated documentation for Ruby 2.0.

ruby2.0-tcltk: Ruby/Tk for Ruby 2.0

 Ruby is the interpreted scripting language for quick and easy
 object-oriented programming. It has many features to process text
 files and to do system management tasks (as in perl). It is simple,
 straight-forward, and extensible.
 .
 This package provides Ruby/Tk, Ruby bindings for the Tk graphical user
 interface toolkit.

ruby2.0-tcltk-dbgsym: debug symbols for package ruby2.0-tcltk

 Ruby is the interpreted scripting language for quick and easy
 object-oriented programming. It has many features to process text
 files and to do system management tasks (as in perl). It is simple,
 straight-forward, and extensible.
 .
 This package provides Ruby/Tk, Ruby bindings for the Tk graphical user
 interface toolkit.