Your message dated Sun, 11 May 2014 11:55:21 +0200
with message-id <[email protected]>
and subject line lenny is long gone
has caused the Debian Bug report #564647,
regarding ruby1.9: WEBrick control characters vulnerability
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
564647: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=564647
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: ruby1.9
Severity: grave
Tags: security
Justification: user security hole
The upstream has released a vulnerability fix in WEBrick, a part of Ruby's
standard library. WEBrick lets attackers to inject malicious escap
e sequences to its logs, making it possible for dangerous control characters
to be executed on a victim's terminal emulator.
-- System Information:
Debian Release: squeeze/sid
APT prefers testing
APT policy: (990, 'testing'), (500, 'stable'), (90, 'unstable'), (1,
'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.30-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=ja_JP.eucJP, LC_CTYPE=ja_JP.eucJP (charmap=EUC-JP)
Shell: /bin/sh linked to /bin/dash
Versions of packages ruby1.9 depends on:
ii libc6 2.10.2-2 GNU C Library: Shared libraries
ii libruby1.9.1 1.9.1.376-1 Libraries necessary to run Ruby 1.
ruby1.9 recommends no packages.
Versions of packages ruby1.9 suggests:
pn rdoc1.9 <none> (no description available)
pn ri1.9 <none> (no description available)
pn ruby1.9-examples <none> (no description available)
pn rubygems1.9 <none> (no description available)
--- End Message ---
--- Begin Message ---
This bug concerns a version of ruby1.9 which was last present in
lenny, thus closing.
--
,''`. Christian Hofstaedtler <[email protected]>
: :' : Debian Developer
`. `' 7D1A CFFA D9E0 806C 9C4C D392 5C13 D6DB 9305 2E03
`-
--- End Message ---
