[DRE-maint] Bug#913093: ruby-i18n: CVE-2014-10077

[Salvatore Bonaccorso]

Source: ruby-i18n
Version: 0.7.0-2
Severity: important
Tags: security upstream
Forwarded: https://github.com/svenfuchs/i18n/pull/289

Hi,

The following vulnerability was published for ruby-i18n.

CVE-2014-10077[0]:
| Hash#slice in lib/i18n/core_ext/hash.rb in the i18n gem before 0.8.0
| for Ruby allows remote attackers to cause a denial of service
| (application crash) via a call in a situation where :some_key is
| present in keep_keys but not present in the hash.

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2014-10077
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-10077
[1] https://github.com/svenfuchs/i18n/pull/289

Regards,
Salvatore