Bug#702526: ruby1.8: CVE-2013-1821: entity expansion DoS vulnerability in REXML

2013-03-12 Thread Lucas Nussbaum
On 09/03/13 at 14:01 +0100, Salvatore Bonaccorso wrote: > Control: tags -1 + patch > > Hi > > Attached is a proposed debdiff, based also on the changes done for > ruby1.9.1. But there is one thing which might be sorted out first: > > The binary debdiff shows: > > cut-cut-cut

Bug#702526: ruby1.8: CVE-2013-1821: entity expansion DoS vulnerability in REXML

2013-03-09 Thread Salvatore Bonaccorso
Control: tags -1 + patch Hi Attached is a proposed debdiff, based also on the changes done for ruby1.9.1. But there is one thing which might be sorted out first: The binary debdiff shows: cut-cut-cut-cut-cut-cut- ri1.8: [The following lists of ch

Bug#702526: ruby1.8: CVE-2013-1821: entity expansion DoS vulnerability in REXML

2013-03-07 Thread Salvatore Bonaccorso
Source: ruby1.8 Severity: grave Tags: security upstream patch Hi, the following vulnerability was published for ruby. CVE-2013-1821[0]: entity expansion DoS vulnerability in REXML More details are explained in the upstream announcement[1]. Patches (for ruby1.9.1) are commited to svn with revisi