Bug#702219: ruby-passenger: CVE-2012-6135

2013-03-30 Thread Felix Geyer 
Upstream says this only affects 4.0.0 betas and *not* 3.x:
http://blog.phusion.nl/2013/03/05/phusion-passenger-4-0-beta-1-and-2-arbitrary-file-deletion-vulnerability/

Cheers,
Felix


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#702219: ruby-passenger: CVE-2012-6135

2013-03-04 Thread Moritz Muehlenhoff 
Package: ruby-passenger
Severity: important
Tags: security

Please see 
http://www.openwall.com/lists/oss-security/2013/03/01/7
http://www.openwall.com/lists/oss-security/2013/03/02/1

Cheers,
Moritz


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org