Commits · jessie-security-wip · Debian Ruby Team / ruby · GitLab

Jul 13, 2018
- update debian/changelog, release 2.1.5-2+deb8u4 · caa0e754
  Santiago R.R. authored Jul 13, 2018
  View commits for tag debian/2.1.5-2+deb8u4 debian/2.1.5-2+deb8u4
  
  caa0e754
- Update debian/patches/series · d710f778
  Santiago R.R. authored Jul 13, 2018
  d710f778
- Add debian/patches/0020-Whitelist-classes-and-symbols-that-are-in-Gem-spec-Y.patch · 3edc08d7
  Santiago R.R. authored Jul 13, 2018
  3edc08d7
Apr 26, 2018
- snapshot debian/changelog · 32a21e32
  Santiago R.R. authored Apr 26, 2018
  32a21e32
Apr 25, 2018
- Add debian/patches/0019-CVE-2017-17742-HTTP-response-splitting-in-WEBrick.patch · 779084a4
  Santiago R.R. authored Apr 25, 2018
  779084a4
- Add debian/patches/0018-CVE-2018-8777-DoS-by-large-request-in-WEBrick.patch · 69743605
  Santiago R.R. authored Apr 25, 2018
  69743605
- Add debian/patches/0017-merge-revision-s-60584-62954-62959-63008.patch · c0207cb9
  Santiago R.R. authored Apr 25, 2018
  c0207cb9
- Add debian/patches/0016-CVE-2018-8779-Unintentional-socket-creation-by-poiso.patch · fb109d36
  Santiago R.R. authored Apr 25, 2018
  fb109d36
- Add debian/patches/0015-CVE-2018-6914-Unintentional-file-and-directory-creat.patch · 454b3cd1
  Santiago R.R. authored Apr 25, 2018
  454b3cd1
- Add debian/patches/0014-CVE-2018-8780-Unintentional-directory-traversal-by-p.patch · 8a4fcdbc
  Santiago R.R. authored Apr 25, 2018
  8a4fcdbc
Apr 22, 2018
- Add debian/patches/0013-CVE-2018-8778-Buffer-under-read-in-String-unpack.patch · ea09a325
  Santiago R.R. authored Apr 22, 2018
  ea09a325
- Add debian/patches/0012-CVE-2018-1000075_CVE-2018-1000076_CVE-2018-1000077_C.patch · 69f51522
  Santiago R.R. authored Apr 22, 2018
  69f51522
- Add debian/patches/0011-CVE-2017-17790-Fixed-command-Injection.patch · 11c83730
  Santiago R.R. authored Apr 22, 2018
  11c83730
- Add debian/patches/0010-CVE-2017-17405-required-changes-in-test.patch · ee835bd5
  Santiago R.R. authored Apr 22, 2018
  ee835bd5
- Add debian/patches/0009-CVE-2017-17405-merge-revision-s-61242-Backport-14185.patch · 2ee3b97b
  Santiago R.R. authored Apr 22, 2018
  2ee3b97b
- Add debian/patches/0008-CVE-2017-0902_CVE-2017-0899_CVE-2017-0900_CVE-2017-0.patch · 9d050478
  Santiago R.R. authored Apr 22, 2018
  9d050478
- Add debian/patches/0007-CVE-2017-0898_CVE-2017-10748_CVE-2017-14033_CVE-2017.patch · 855c0c06
  Santiago R.R. authored Apr 22, 2018
  855c0c06
- Add debian/patches/0006-PATCH-02-12-cipher-don-t-set-dummy-encryption-key-in.patch · 2ac58fc4
  Santiago R.R. authored Apr 22, 2018
  2ac58fc4
- Add debian/patches/CVE-2016-2339-Exploitable-heap-overflow-.patch · 9c88dc09
  Santiago R.R. authored Apr 22, 2018
  9c88dc09
- Rename CVE-2015-9096-SMTP-command-injection-via-CRLF-sequen.patch · 74b81e72
  Santiago R.R. authored Apr 22, 2018
  74b81e72
- Add debian/patches/0004-CVE-2015-9096-SMTP-command-injection-via-CRLF-sequen.patch · 64559ea7
  Santiago R.R. authored Apr 22, 2018
  64559ea7
Apr 12, 2018
- Import Debian changes 2.1.5-2+deb8u3 · 959def32
  Petter Reinholdtsen authored Jun 07, 2016 and Santiago R.R. committed Apr 12, 2018
  959def32
Jun 07, 2016
- security NMU: 2.1.5-2+deb8u3 · a8f4022a
  Petter Reinholdtsen authored Jun 07, 2016 and Antonio Terceiro committed Jun 07, 2016
  
  View commits for tag debian/2.1.5-2+deb8u3 debian/2.1.5-2+deb8u3
  
  a8f4022a
- CVE-2015-7551: Add checks to Fiddle for tainted string arguments · e2dbb409
  CHIKANAGA Tomoyuki authored Jun 07, 2016 and Antonio Terceiro committed Jun 07, 2016
  e2dbb409
- CVE-2009-5147: DL::dlopen could open a library with tainted library name · 6d57ccea
  Yuki Sonoda (Yugui) authored Jun 07, 2016 and Antonio Terceiro committed Jun 07, 2016
  6d57ccea
Jul 30, 2015
- target at jessie · d258acd6
  Antonio Terceiro authored Jul 30, 2015
  
  View commits for tag debian/2.1.5-2+deb8u2 debian/2.1.5-2+deb8u2
  
  d258acd6
Jul 29, 2015
- Fix Request hijacking vulnerability in Rubygems · 1343055e
  Antonio Terceiro authored Jul 29, 2015
  
  1343055e
- Fix API endpoint domain clamping · 61f89c1e
  Evan Phoenix authored May 18, 2015 and Antonio Terceiro committed Jul 29, 2015
  
  61f89c1e
- Limit API endpoint to original security domain · 9b945cad
  Evan Phoenix authored May 14, 2015 and Antonio Terceiro committed Jul 29, 2015
  9b945cad
Apr 27, 2015
- Upload to jessie-security · fb5304e7
  Antonio Terceiro authored Apr 27, 2015
  
  View commits for tag debian/2.1.5-2+deb8u1 debian/2.1.5-2+deb8u1
  
  fb5304e7
Apr 17, 2015
- Release · 0dffd611
  Antonio Terceiro authored Apr 17, 2015
  
  View commits for tag debian/2.1.5-3 debian/2.1.5-3
  
  0dffd611
- merge revision(s) 50292: [Backport #9644] · df2842bc
  usa authored Apr 13, 2015 and Antonio Terceiro committed Apr 17, 2015
  df2842bc
Apr 03, 2015
- debian/upstream-changes: simpler and more accurate implementation · 9f8abd5b
  Antonio Terceiro authored Apr 03, 2015
  
  View commits for tag debian/2.1.5-2 debian/2.1.5-2
  
  9f8abd5b
- Merge remote-tracking branch 'origin/debian/jessie' into debian/jessie · ebef7896
  Antonio Terceiro authored Apr 03, 2015
  
  ebef7896
- Fix Segmentation fault after pack & ioctl & unpack · e42882c2
  Antonio Terceiro authored Apr 03, 2015
  
  e42882c2
- pack.c: use ivar for associated objects · 3a1c3f45
  nobu authored Feb 04, 2014 and Antonio Terceiro committed Apr 03, 2015
  3a1c3f45
- gpb.conf: point to jessie maintainance branches · b1aff2da
  Antonio Terceiro authored Mar 31, 2015
  
  b1aff2da
Apr 01, 2015
- No need to mention upstream branch · e96fb353
  Antonio Terceiro authored Mar 31, 2015
  
  e96fb353
- New upstream release · cfc9280c
  Antonio Terceiro authored Mar 31, 2015
  
  cfc9280c
- Merge tag 'upstream/2.1.5.329' into debian/jessie · b58f2eb2
  Antonio Terceiro authored Mar 31, 2015
  b58f2eb2