Пакет ruby: Информация

    Исходный пакет: ruby
    Версия: 2.4.4-alt0.M80C.1
    Собран:  24 мая 2018 г. 2:00 в задании #203550
    Скопирован в задании: #206889
    Категория: Разработка/Ruby
    Сообщить об ошибке в пакете
    Домашняя страница: http://www.ruby-lang.org/

    Лицензия: BSD (revised) or Ruby
    О пакете: An Interpreted Object-Oriented Scripting Language
    Описание: 
    Ruby is an interpreted scripting language for quick and easy object-oriented
    programming. It has many features for processing text files and performing system
    management tasks (as in Perl). It is simple, straight-forward, and extensible.
    
    This package contains interpreter of object-oriented scripting language Ruby.

    Список rpm-пакетов, предоставляемых данным srpm-пакетом:
    irb (noarch)
    libruby (x86_64, i586)
    libruby-debuginfo (x86_64, i586)
    libruby-devel (x86_64, i586)
    libruby-devel-static (x86_64, i586)
    ri (noarch)
    ruby (x86_64, i586)
    ruby-debuginfo (x86_64, i586)
    ruby-doc-ri (noarch)
    ruby-stdlibs (x86_64, i586)
    ruby-stdlibs-debuginfo (x86_64, i586)
    ruby-tools (noarch)

    Сопровождающий: Andrey Cherepanov


      1. libssl-devel
      2. libyaml-devel
      3. groff-base
      4. libncursesw-devel
      5. libgdbm-devel
      6. doxygen
      7. ruby
      8. ruby-stdlibs
      9. gcc-c++
      10. rpm-build-ruby >= 1:0.1.3
      11. libreadline-devel
      12. libdb4-devel
      13. zlib-devel
      14. libffi-devel

    Последнее изменение


    5 апреля 2018 г. Andrey Cherepanov 2.4.4-alt0.M80C.1
    - New version.
    - Fixes:
      + CVE-2017-17742: HTTP response splitting in WEBrick
      + CVE-2018-6914: Unintentional file and directory creation with directory traversal in tempfile and tmpdir
      + CVE-2018-8777: DoS by large request in WEBrick
      + CVE-2018-8778: Buffer under-read in String#unpack
      + CVE-2018-8779: Unintentional socket creation by poisoned NUL byte in UNIXServer and UNIXSocket
      + CVE-2018-8780: Unintentional directory traversal by poisoned NUL byte in Dir
    17 января 2018 г. Andrey Cherepanov 2.4.3-alt0.M80C.1
    - New version
    - Fixes:
      + CVE-2017-17405: Command injection vulnerability in Net::FTP
    12 октября 2017 г. Andrey Cherepanov 2.4.2-alt1.M80C.1
    - Backport new version with security fixes to c8 branch
    - Merge rubygems-2.6.14 changes
    - Fixes:
      + CVE-2017-0903 Unsafe Object Deserialization Vulnerability in RubyGems
      + CVE-2017-0898 Buffer underrun vulnerability in Kernel.sprintf
      + CVE-2017-10784 Escape sequence injection vulnerability in the Basic authentication of WEBrick
      + CVE-2017-14033 Buffer underrun vulnerability in OpenSSL ASN1 decode
      + CVE-2017-14064 Heap exposure in generating JSON
      + CVE-2017-0902 A DNS request hijacking vulnerability
      + CVE-2017-0899 An ANSI escape sequence vulnerability
      + CVE-2017-0900 A DoS vulnerability in the query command
      + CVE-2017-0901 A vulnerability in the gem installer that allowed a malicious gem to overwrite arbitrary files