ELSA-2008-0562

ELSA-2008-0562 - ruby security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2008-07-14

Description

[1.6.8-12.el3]
- ruby-1.6.8-string-CVE-2008-2664.patch: wrong patch. Fix a segfault.

[1.6.8-11.el3]
- CVE-2008-2376: Integer overflow in rb_ary_fill().

[1.6.8-10.el3]
- security fixes. (#451931)
- CVE-2006-6303: Fix the infinite loop issue with the malformed multipart
data in cgi.rb.
- CVE-2008-2663: Fix the integer overflow in rb_ary_store().
- CVE-2008-2664: Fix the unsafe use of alloca in rb_str_format().
- CVE-2008-2727: Fix the integer overflow in rb_ary_replace().
- CVE-2008-2728: Fix the integer overflow in rb_ary_replace().

Related CVEs

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 3 (i386)	ruby-1.6.8-12.el3.src.rpm	1a5f57a6418e38d7f6acc44d95cbce9f	ELSA-2008-0896
	irb-1.6.8-12.el3.i386.rpm	2e398148730b3629aa9209b4ba77265e	ELSA-2008-0896
	ruby-1.6.8-12.el3.i386.rpm	70f69298920cba7927c884fc696a3106	ELSA-2008-0896
	ruby-devel-1.6.8-12.el3.i386.rpm	ca0eced63288675dfa5c16102b148387	ELSA-2008-0896
	ruby-docs-1.6.8-12.el3.i386.rpm	a1c6a5ab5cc60b7f25c8147a8d6a5f0c	ELSA-2008-0896
	ruby-libs-1.6.8-12.el3.i386.rpm	47779c310813c0e19d884d198b8168cd	ELSA-2008-0896
	ruby-mode-1.6.8-12.el3.i386.rpm	9ce322a14e37d073c2b17b3c14dc754e	ELSA-2008-0896
	ruby-tcltk-1.6.8-12.el3.i386.rpm	134294e0f14262cbf78b381e0c654f7c	ELSA-2008-0896
Oracle Linux 3 (x86_64)	ruby-1.6.8-12.el3.src.rpm	1a5f57a6418e38d7f6acc44d95cbce9f	ELSA-2008-0896
	irb-1.6.8-12.el3.x86_64.rpm	280f760b3723783aeb21c5bc1d6aa8e9	ELSA-2008-0896
	ruby-1.6.8-12.el3.x86_64.rpm	5706b61b6aeaf10180a9a68783182280	ELSA-2008-0896
	ruby-devel-1.6.8-12.el3.x86_64.rpm	7533f503ee5ea9de4bc7763dd21b276a	ELSA-2008-0896
	ruby-docs-1.6.8-12.el3.x86_64.rpm	7794d931e413ef5decf72296805a9c6d	ELSA-2008-0896
	ruby-libs-1.6.8-12.el3.i386.rpm	47779c310813c0e19d884d198b8168cd	ELSA-2008-0896
	ruby-libs-1.6.8-12.el3.x86_64.rpm	83df919820ca17b1a5242641903691b6	ELSA-2008-0896
	ruby-mode-1.6.8-12.el3.x86_64.rpm	1c9a9baed3701f4599300698b44c902e	ELSA-2008-0896
	ruby-tcltk-1.6.8-12.el3.x86_64.rpm	3dff884eb891ec5158a6f4db09eb53a1	ELSA-2008-0896

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team