[DRE-maint] Bug#913093: ruby-i18n: CVE-2014-10077

Salvatore Bonaccorso carnil at debian.org
Tue Nov 6 21:13:07 GMT 2018

Source: ruby-i18n
Version: 0.7.0-2
Severity: important
Tags: security upstream
Forwarded: https://github.com/svenfuchs/i18n/pull/289


The following vulnerability was published for ruby-i18n.

| Hash#slice in lib/i18n/core_ext/hash.rb in the i18n gem before 0.8.0
| for Ruby allows remote attackers to cause a denial of service
| (application crash) via a call in a situation where :some_key is
| present in keep_keys but not present in the hash.

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2014-10077
[1] https://github.com/svenfuchs/i18n/pull/289


More information about the Pkg-ruby-extras-maintainers mailing list