Register | Log in

ruby2.3

Choose email to subscribe with

general

source: ruby2.3 (updates)
version: 2.3.3-1+deb9u9
maintainer: Antonio Terceiro (DMD) (LowNMU)
uploaders: Christian Hofstaedtler [DMD]
arch: all any
std-ver: 3.9.8
VCS: Git (Browse)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 2.3.3-1+deb9u8
o-o-sec: 2.3.3-1+deb9u9

versioned links

2.3.3-1+deb9u8: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.3.3-1+deb9u9: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libruby2.3
ruby2.3
ruby2.3-dev
ruby2.3-doc
ruby2.3-tcltk

package is gone

This package is not in any development repository. This probably means that the package has been removed (or has been renamed). Thus the information here is of little interest ... the package is going to disappear unless someone takes it over and reintroduces it.

action needed

Debci reports failed tests high

unstable: fail (log)
The tests ran in 0:00:19
Last run: 2018-05-01T22:40:13.000Z
Previous status: fail

testing: fail (log)
The tests ran in 0:06:24
Last run: 2018-04-02T07:29:27.000Z
Previous status: fail

stable: fail (log)
The tests ran in 0:05:45
Last run: 2019-04-23T21:48:48.000Z
Previous status: fail

Created: 2020-04-20 Last update: 2021-09-18 17:39

4 security issues in stretch high

There are 4 open security issues in stretch.

3 important issues:

CVE-2021-31799: In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename.
CVE-2021-31810: An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. A malicious FTP server can use the PASV response to trick Net::FTP into connecting back to a given IP address and port. This potentially makes curl extract information about services that are otherwise private and not disclosed (e.g., the attacker can conduct port scans and service banner extractions).
CVE-2021-32066: An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. Net::IMAP does not raise an exception when StartTLS fails with an an unknown response, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a "StartTLS stripping attack."

1 issue postponed or untriaged:

CVE-2021-28965: (postponed; to be fixed through a stable update) The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML round-trip issues. An incorrect document can be produced after parsing and serializing.

Created: 2021-07-08 Last update: 2021-08-14 14:00

news

[2020-10-01] Accepted ruby2.3 2.3.3-1+deb9u9 (source amd64 all) into oldstable (Utkarsh Gupta)
[2020-06-15] Accepted ruby2.3 2.3.3-1+deb9u8 (source amd64 all) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Debian FTP Masters) (signed by: Utkarsh Gupta)
[2019-12-21] Accepted ruby2.3 2.3.3-1+deb9u7 (source) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Salvatore Bonaccorso)
[2019-12-17] Accepted ruby2.3 2.3.3-1+deb9u7 (source) into oldstable->embargoed, oldstable (Salvatore Bonaccorso)
[2019-04-18] Accepted ruby2.3 2.3.3-1+deb9u6 (source amd64 all) into proposed-updates->stable-new, proposed-updates (Moritz Mühlenhoff)
[2019-04-16] Accepted ruby2.3 2.3.3-1+deb9u6 (source amd64 all) into stable->embargoed, stable (Moritz Mühlenhoff)
[2019-03-09] Accepted ruby2.3 2.3.3-1+deb9u5 (source) into proposed-updates->stable-new, proposed-updates (Antonio Terceiro)
[2019-03-09] Accepted ruby2.3 2.3.3-1+deb9u4 (source) into proposed-updates->stable-new, proposed-updates (Salvatore Bonaccorso) (signed by: Antonio Terceiro)
[2019-03-09] Accepted ruby2.3 2.3.3-1+deb9u3 (source) into proposed-updates->stable-new, proposed-updates (Santiago R.R.) (signed by: Santiago Ruano Rincón)
[2018-11-03] Accepted ruby2.3 2.3.3-1+deb9u4 (source) into stable->embargoed, stable (Salvatore Bonaccorso) (signed by: Antonio Terceiro)
[2018-07-31] Accepted ruby2.3 2.3.3-1+deb9u3 (source) into stable->embargoed, stable (Santiago R.R.) (signed by: Santiago Ruano Rincón)
[2018-04-30] Removed 2.3.6-2 from unstable (Debian FTP Masters)
[2018-04-30] Removed 2.3.6-1 from unstable (Debian FTP Masters)
[2018-04-30] Removed 2.3.1-2 from unstable (Debian FTP Masters)
[2018-04-25] ruby2.3 REMOVED from testing (Debian testing watch)
[2017-12-29] ruby2.3 2.3.6-2 MIGRATED to testing (Debian testing watch)
[2017-12-23] Accepted ruby2.3 2.3.6-2 (source) into unstable (Antonio Terceiro)
[2017-12-22] Accepted ruby2.3 2.3.6-1 (source) into unstable (Antonio Terceiro)
[2017-11-14] Accepted ruby2.3 2.3.5-1 (source) into unstable (Antonio Terceiro)
[2017-11-12] Accepted ruby2.3 2.3.3-1+deb9u2 (source amd64 all) into proposed-updates->stable-new, proposed-updates (Antonio Terceiro)
[2017-10-09] ruby2.3 2.3.3-1+deb9u1 MIGRATED to testing (Debian testing watch)
[2017-09-23] Accepted ruby2.3 2.3.3-1+deb9u1 (source amd64 all) into proposed-updates->stable-new, proposed-updates (Antonio Terceiro)
[2016-12-07] ruby2.3 2.3.3-1 MIGRATED to testing (Debian testing watch)
[2016-11-22] Accepted ruby2.3 2.3.3-1 (source) into unstable (Christian Hofstaedtler)
[2016-11-16] Accepted ruby2.3 2.3.2-1 (source) into unstable (Christian Hofstaedtler)
[2016-11-15] ruby2.3 2.3.1-6 MIGRATED to testing (Debian testing watch)
[2016-11-09] Accepted ruby2.3 2.3.1-6 (source) into unstable (Antonio Terceiro)
[2016-07-29] ruby2.3 2.3.1-5 MIGRATED to testing (Debian testing watch)
[2016-06-18] Accepted ruby2.3 2.3.1-5 (source) into unstable (Christian Hofstaedtler)
[2016-06-15] Accepted ruby2.3 2.3.1-4 (source) into unstable (Christian Hofstaedtler)

1
2

bugs [bug history graph]

all: 0

links

homepage
buildd: logs, clang, cross
popcon
edit tags
security tracker
screenshots
debci

Debian Package Tracker — Copyright 2013-2018 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Bugs — Git Repository — Contributing