[ubuntu/quantal] ruby1.9.1 1.9.3.194-1ubuntu1 (Accepted)

[Tyler Hicks]

ruby1.9.1 (1.9.3.194-1ubuntu1) quantal; urgency=low

  * SECURITY UPDATE: Safe level bypass
    - debian/patches/20120927-cve_2011_1005.patch: Remove incorrect string
      taint in exception handling methods. Based on upstream patch.
    - CVE-2011-1005
  * Make the RubyGems fetcher use distro-provided ca-certificates
    (LP: #1057926)
    - debian/control: Add ca-certificates to libruby1.9.1 depends so that
      rubygems can perform certificate verification
    - debian/rules: Don't install SSL certificates from upstream sources
    - debian/patches/20120927-rubygems_disable_upstream_certs.patch: Use
      /etc/ssl/certs/ca-certificates.crt for the trusted CA certificates.

Date: Thu, 27 Sep 2012 20:37:54 -0700
Changed-By: Tyler Hicks <tyhicks at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Jamie Strandboge <jamie at ubuntu.com>
https://launchpad.net/ubuntu/quantal/+source/ruby1.9.1/1.9.3.194-1ubuntu1
-------------- next part --------------
Format: 1.8
Date: Thu, 27 Sep 2012 20:37:54 -0700
Source: ruby1.9.1
Binary: ruby1.9.1 libruby1.9.1 libruby1.9.1-dbg ruby1.9.1-dev libtcltk-ruby1.9.1 ruby1.9.1-examples ri1.9.1 ruby1.9.1-full ruby1.9.3
Architecture: source
Version: 1.9.3.194-1ubuntu1
Distribution: quantal
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Tyler Hicks <tyhicks at canonical.com>
Description: 
 libruby1.9.1 - Libraries necessary to run Ruby 1.9.1
 libruby1.9.1-dbg - Debugging symbols for Ruby 1.9.1
 libtcltk-ruby1.9.1 - Tcl/Tk interface for Ruby 1.9.1
 ri1.9.1    - Ruby Interactive reference (for Ruby 1.9.1)
 ruby1.9.1  - Interpreter of object-oriented scripting language Ruby
 ruby1.9.1-dev - Header files for compiling extension modules for the Ruby 1.9.1
 ruby1.9.1-examples - Examples for Ruby 1.9
 ruby1.9.1-full - Ruby 1.9.1 full installation
 ruby1.9.3  - Interpreter of object-oriented scripting language Ruby, version 1
Launchpad-Bugs-Fixed: 1057926
Changes: 
 ruby1.9.1 (1.9.3.194-1ubuntu1) quantal; urgency=low
 .
   * SECURITY UPDATE: Safe level bypass
     - debian/patches/20120927-cve_2011_1005.patch: Remove incorrect string
       taint in exception handling methods. Based on upstream patch.
     - CVE-2011-1005
   * Make the RubyGems fetcher use distro-provided ca-certificates
     (LP: #1057926)
     - debian/control: Add ca-certificates to libruby1.9.1 depends so that
       rubygems can perform certificate verification
     - debian/rules: Don't install SSL certificates from upstream sources
     - debian/patches/20120927-rubygems_disable_upstream_certs.patch: Use
       /etc/ssl/certs/ca-certificates.crt for the trusted CA certificates.
Checksums-Sha1: 
 59f97d89e638eab6470cc5c04f93addc2f123e60 2741 ruby1.9.1_1.9.3.194-1ubuntu1.dsc
 2ebc3d131e43f19b13533ae61491ab4017fa3639 51644 ruby1.9.1_1.9.3.194-1ubuntu1.debian.tar.gz
Checksums-Sha256: 
 6aa9204479db33d80290f18a69b23fa202b1e44a97d5fba6d18355386e9a311e 2741 ruby1.9.1_1.9.3.194-1ubuntu1.dsc
 b252ea3bd37cf47f327d1af6ffba83b42328f4634128998469fc5d23be7f9af7 51644 ruby1.9.1_1.9.3.194-1ubuntu1.debian.tar.gz
Files: 
 f396d759b0ef22432a2875d622b8fe4b 2741 ruby optional ruby1.9.1_1.9.3.194-1ubuntu1.dsc
 2c8282d0065e139900350fd810267949 51644 ruby optional ruby1.9.1_1.9.3.194-1ubuntu1.debian.tar.gz
Original-Maintainer: akira yamada <akira at debian.org>