Register | Log in

ruby2.3

Choose email to subscribe with

general

source: ruby2.3 (updates)
version: 2.3.3-1+deb9u6
maintainer: Antonio Terceiro (DMD) (LowNMU)
uploaders: Christian Hofstaedtler [DMD]
arch: all any
std-ver: 3.9.8
VCS: Git (Browse)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

stable: 2.3.3-1+deb9u6
stable-sec: 2.3.3-1+deb9u6

versioned links

2.3.3-1+deb9u6: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libruby2.3
ruby2.3
ruby2.3-dev
ruby2.3-doc
ruby2.3-tcltk

package is gone

This package is not in any development repository. This probably means that the package has been removed (or has been renamed). Thus the information here is of little interest ... the package is going to disappear unless someone takes it over and reintroduces it.

action needed

4 security issues in stretch high

There are 4 open security issues in stretch.

4 important issues:

CVE-2019-16255: Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows code injection if the first argument (aka the "command" argument) to Shell#[] or Shell#test in lib/shell.rb is untrusted data. An attacker can exploit this to call an arbitrary Ruby method.
CVE-2019-15845: Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within File.fnmatch functions.
CVE-2019-16254: Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows HTTP Response Splitting. If a program using WEBrick inserts untrusted input into the response header, an attacker can exploit it to insert a newline character to split a header, and inject malicious content to deceive clients. NOTE: this issue exists because of an incomplete fix for CVE-2017-17742, which addressed the CRLF vector, but did not address an isolated CR or an isolated LF.
CVE-2019-16201: WEBrick::HTTPAuth::DigestAuth in Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 has a regular expression Denial of Service cause by looping/backtracking. A victim must expose a WEBrick server that uses DigestAuth to the Internet or a untrusted network.

Please fix them.

Created: 2019-11-20 Last update: 2019-11-28 08:23

news

[2019-04-18] Accepted ruby2.3 2.3.3-1+deb9u6 (source amd64 all) into proposed-updates->stable-new, proposed-updates (Moritz Mühlenhoff)
[2019-04-16] Accepted ruby2.3 2.3.3-1+deb9u6 (source amd64 all) into stable->embargoed, stable (Moritz Mühlenhoff)
[2019-03-09] Accepted ruby2.3 2.3.3-1+deb9u5 (source) into proposed-updates->stable-new, proposed-updates (Antonio Terceiro)
[2019-03-09] Accepted ruby2.3 2.3.3-1+deb9u4 (source) into proposed-updates->stable-new, proposed-updates (Salvatore Bonaccorso) (signed by: Antonio Terceiro)
[2019-03-09] Accepted ruby2.3 2.3.3-1+deb9u3 (source) into proposed-updates->stable-new, proposed-updates (Santiago R.R.) (signed by: Santiago Ruano Rincón)
[2018-11-03] Accepted ruby2.3 2.3.3-1+deb9u4 (source) into stable->embargoed, stable (Salvatore Bonaccorso) (signed by: Antonio Terceiro)
[2018-07-31] Accepted ruby2.3 2.3.3-1+deb9u3 (source) into stable->embargoed, stable (Santiago R.R.) (signed by: Santiago Ruano Rincón)
[2018-04-30] Removed 2.3.6-2 from unstable (Debian FTP Masters)
[2018-04-30] Removed 2.3.6-1 from unstable (Debian FTP Masters)
[2018-04-30] Removed 2.3.1-2 from unstable (Debian FTP Masters)
[2018-04-25] ruby2.3 REMOVED from testing (Debian testing watch)
[2017-12-29] ruby2.3 2.3.6-2 MIGRATED to testing (Debian testing watch)
[2017-12-23] Accepted ruby2.3 2.3.6-2 (source) into unstable (Antonio Terceiro)
[2017-12-22] Accepted ruby2.3 2.3.6-1 (source) into unstable (Antonio Terceiro)
[2017-11-14] Accepted ruby2.3 2.3.5-1 (source) into unstable (Antonio Terceiro)
[2017-11-12] Accepted ruby2.3 2.3.3-1+deb9u2 (source amd64 all) into proposed-updates->stable-new, proposed-updates (Antonio Terceiro)
[2017-10-09] ruby2.3 2.3.3-1+deb9u1 MIGRATED to testing (Debian testing watch)
[2017-09-23] Accepted ruby2.3 2.3.3-1+deb9u1 (source amd64 all) into proposed-updates->stable-new, proposed-updates (Antonio Terceiro)
[2016-12-07] ruby2.3 2.3.3-1 MIGRATED to testing (Debian testing watch)
[2016-11-22] Accepted ruby2.3 2.3.3-1 (source) into unstable (Christian Hofstaedtler)
[2016-11-16] Accepted ruby2.3 2.3.2-1 (source) into unstable (Christian Hofstaedtler)
[2016-11-15] ruby2.3 2.3.1-6 MIGRATED to testing (Debian testing watch)
[2016-11-09] Accepted ruby2.3 2.3.1-6 (source) into unstable (Antonio Terceiro)
[2016-07-29] ruby2.3 2.3.1-5 MIGRATED to testing (Debian testing watch)
[2016-06-18] Accepted ruby2.3 2.3.1-5 (source) into unstable (Christian Hofstaedtler)
[2016-06-15] Accepted ruby2.3 2.3.1-4 (source) into unstable (Christian Hofstaedtler)
[2016-06-14] Accepted ruby2.3 2.3.1-3 (source) into unstable (Christian Hofstaedtler)
[2016-06-05] ruby2.3 2.3.1-2 MIGRATED to testing (Debian testing watch)
[2016-05-30] Accepted ruby2.3 2.3.1-2 (source) into unstable (Christian Hofstaedtler)
[2016-05-03] ruby2.3 2.3.1-1 MIGRATED to testing (Debian testing watch)

1
2

bugs [bug history graph]

all: 0

links

homepage
buildd: logs, clang, cross
popcon
browse source code
edit tags
security tracker
screenshots

Debian Package Tracker — Copyright 2013-2018 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Bugs — Git Repository — Contributing