Your message dated Mon, 26 Aug 2019 11:06:50 +0000
with message-id <e1i2cpm-000abg...@fasolo.debian.org>
and subject line Bug#934802: fixed in ruby-nokogiri 1.10.4+dfsg1-1
has caused the Debian Bug report #934802,
regarding ruby-nokogiri: CVE-2019-5477: command injection vulnerability
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
934802: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=934802
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: ruby-nokogiri
Version: 1.10.3+dfsg1-2
Severity: grave
Tags: security upstream
Justification: user security hole
Forwarded: https://github.com/sparklemotion/nokogiri/issues/1915
Hi,
The following vulnerability was published for ruby-nokogiri.
CVE-2019-5477[0]:
Command Injection Vulnerability
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
[0] https://security-tracker.debian.org/tracker/CVE-2019-5477
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5477
[1] https://github.com/sparklemotion/nokogiri/issues/1915
Please adjust the affected versions in the BTS as needed.
Regards,
Salvatore
--- End Message ---
--- Begin Message ---
Source: ruby-nokogiri
Source-Version: 1.10.4+dfsg1-1
We believe that the bug you reported is fixed in the latest version of
ruby-nokogiri, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 934...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Georg Faerber <ge...@debian.org> (supplier of updated ruby-nokogiri package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 26 Aug 2019 10:21:24 +0000
Source: ruby-nokogiri
Architecture: source
Version: 1.10.4+dfsg1-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Ruby Extras Maintainers
<pkg-ruby-extras-maintain...@lists.alioth.debian.org>
Changed-By: Georg Faerber <ge...@debian.org>
Closes: 934802
Changes:
ruby-nokogiri (1.10.4+dfsg1-1) unstable; urgency=medium
.
* New upstream version. (Closes: #934802)
* Drop compat file, add Build-Dependency on debhelper-compat.
* Use my debian.org mail address.
* Update gemspec file to 1.10.4.
.
[ Utkarsh Gupta ]
* Add salsa-ci.yml
Checksums-Sha1:
629340476a0318bc5c6dd7776680286f8c696781 1670 ruby-nokogiri_1.10.4+dfsg1-1.dsc
6a7d7066303d7bb42a85a6f0efff49d077789f7c 455424
ruby-nokogiri_1.10.4+dfsg1.orig.tar.xz
87410f22406e11f4bc68c516a1402f48ac9e432b 9792
ruby-nokogiri_1.10.4+dfsg1-1.debian.tar.xz
70bfe2c6b441a9bc6c2d9e36238fa4bc57bc2569 9049
ruby-nokogiri_1.10.4+dfsg1-1_amd64.buildinfo
Checksums-Sha256:
83a385c662e5f575bf5993f1978b4cda98a7751f8b91040550af0919bfb3cccb 1670
ruby-nokogiri_1.10.4+dfsg1-1.dsc
03f2870ae302fd2a50a7563571ff136a380f002143560af73d9c458583d78c6d 455424
ruby-nokogiri_1.10.4+dfsg1.orig.tar.xz
7e2b954fc56a2462732d399bd10f5ec46e1b3b93bad7876808add5d7cc0e39e7 9792
ruby-nokogiri_1.10.4+dfsg1-1.debian.tar.xz
393dd6f0eced9998da6ec58306ffb68f081b8249c4bf07d30a6f5b6d65d6c385 9049
ruby-nokogiri_1.10.4+dfsg1-1_amd64.buildinfo
Files:
ea5e31a9e9fc5ae8891016344dc2ffd7 1670 ruby optional
ruby-nokogiri_1.10.4+dfsg1-1.dsc
2ba90db46e98f406e9f6e6939ba6fb9a 455424 ruby optional
ruby-nokogiri_1.10.4+dfsg1.orig.tar.xz
531406d7756c29bb58f35dac43bdcf1a 9792 ruby optional
ruby-nokogiri_1.10.4+dfsg1-1.debian.tar.xz
60477f73704d1517c8b2de3c5f5afcfa 9049 ruby optional
ruby-nokogiri_1.10.4+dfsg1-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iHUEARYIAB0WIQTEfr/MTlfp/DLKNABGG+5dJAqekQUCXWO0qwAKCRBGG+5dJAqe
kfVMAQDPnOGK8qO458EUF6KdOouwA6C2EQsR1Btnd27cgLyvKwEArHip6lR1Zr3t
l1gKSXSXfFonEm+dPi0xDiUjDSZ+gg0=
=E2yt
-----END PGP SIGNATURE-----
--- End Message ---
