[Mageia-dev] Freeze push: ruby-rdoc

Anne Nicolas ennael at mageia.org
Wed Feb 6 18:46:36 CET 2013


Le 06/02/2013 17:23, FundaWang a écrit :
> Hello,
> Could somebody push ruby-rdoc 3.12.1 into cauldron? It fixed CVE-2013-0256:
> RDoc documentation generated by rdoc 2.3.0 through rdoc 3.12 and prereleases up
> to rdoc 4.0.0.preview2.1 are vulnerable to an XSS exploit.  This exploit may
> lead to cookie disclosure to third parties.
> 
> Regards. 		 	   		

http://pkgsubmit.mageia.org/uploads/failure/cauldron/core/release/20130206174500.ennael.valstar.446/log

-- 
Anne
http://mageia.org


More information about the Mageia-dev mailing list