[DRE-maint] Bug#882034: ruby-redis-store for jessie and stretch (#882034 CVE-2017-1000248). Proposed patch

[Cédric Boutillier]

Hi,

On Fri, Dec 08, 2017 at 09:31:47AM +0100, Salvatore Bonaccorso wrote:
> Hi Cédric,


> Thanks a lot for fixing this in unstable and experimental, so we have
> quarantee that it's fixed in next stable. For stretch: Can you fix the
> issue via a point release? 

Sure. It is too late for the one coming this weekend, but I'll ask
inclusion for the next Stretch update.

> What do you mean by the version in jessie? AFAICT the package was not
> renamed, and ruby-redis-store is not present in jessie, do I miss
> something?

Oops, sorry. Indeed there is no version of ruby-redis-store. I got
confused with another package.

Thanks!

Cédric
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-ruby-extras-maintainers/attachments/20171208/b260072e/attachment.sig>