Commit graph

6 commits

Author SHA1 Message Date
deg84
ee04b9d3c5 OpenSSL library updated to 1.0.1h
Previous versions of the library contain a vulnerability CVE-2014-0224.
2014-06-06 01:30:29 +09:00
Thomas Johansen
e9d59cb0cc Replace all MD5 checksums with SHA2 checksums 2014-05-23 14:39:41 +07:00
Vadim Golub
7bb33b04af OpenSSL library updated to 1.0.1g
Previous versions of the library contain a vulnerability CVE-2014-0160.
2014-04-08 01:51:57 +03:00
Jose Luis Salas
53920b0fe1 Update libyaml to 0.1.6
Security fix for CVE-2014-2525

Advisory: http://www.ocert.org/advisories/ocert-2014-003.html
2014-03-26 21:17:10 +01:00
Andreas Fuchs
45067e752f Install libyaml 0.1.5 for 2.x rubies also
This should plug the vulnerability to CVE-2013-6393 (and fix #504)
that can still occur in certain systems: If the ruby build process
couldn't find a libyaml that worked, it would build its own vendored
libyaml, which was 0.1.4 (and is vulnerable).

Instead, specify that the build always should install the latest
libyaml & build against that.
2014-02-07 15:41:03 -08:00
Shannon Skipper
0deaa4001d Add ruby-2.1.0-rc1. 2013-12-20 09:16:40 -08:00