On Mon, Mar 7, 2011 at 10:57 AM, Jeremy Evans <jer...@cvs.openbsd.org> wrote:
> CVSROOT:        /cvs
> Module name:    ports
> Changes by:     jer...@cvs.openbsd.org  2011/03/07 11:57:38
>
> Modified files:
>        lang/ruby/1.8  : Makefile distinfo
>
> Log message:
> Bump to ruby 1.8.7p334, fixing two security vulnerabilities:
>
> * FileUtils is vulnerable to symlink race attacks
> * Exception methods can bypass $SAFE

This was OK jasper@

Reply via email to