ELSA-2008-0562

ELSA-2008-0562 - ruby security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2008-07-14

Description

[1.6.8-12.el3]
- ruby-1.6.8-string-CVE-2008-2664.patch: wrong patch. Fix a segfault.

[1.6.8-11.el3]
- CVE-2008-2376: Integer overflow in rb_ary_fill().

[1.6.8-10.el3]
- security fixes. (#451931)
- CVE-2006-6303: Fix the infinite loop issue with the malformed multipart
data in cgi.rb.
- CVE-2008-2663: Fix the integer overflow in rb_ary_store().
- CVE-2008-2664: Fix the unsafe use of alloca in rb_str_format().
- CVE-2008-2727: Fix the integer overflow in rb_ary_replace().
- CVE-2008-2728: Fix the integer overflow in rb_ary_replace().

Related CVEs

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 3 (i386)	ruby-1.6.8-12.el3.src.rpm	5497f1f89b5a667074e9100d704fded03ad65898cb12e90ef278a7047f7c6eeb	ELSA-2008-0896	el3_i386_latest
	ruby-1.6.8-12.el3.src.rpm	5497f1f89b5a667074e9100d704fded03ad65898cb12e90ef278a7047f7c6eeb	ELSA-2008-0896	el3_u9_i386_patch
	irb-1.6.8-12.el3.i386.rpm	ea0e6931f92ffff0fc4445b95fac3ade377eca61e94c4d3783466c1e9c1dc309	ELSA-2008-0896	el3_i386_latest
	irb-1.6.8-12.el3.i386.rpm	ea0e6931f92ffff0fc4445b95fac3ade377eca61e94c4d3783466c1e9c1dc309	ELSA-2008-0896	el3_u9_i386_patch
	ruby-1.6.8-12.el3.i386.rpm	a22a80ca6ccf6be67117aba13baa33199ec7ec2edf9bfe39d7ca1d08a86207b1	ELSA-2008-0896	el3_i386_latest
	ruby-1.6.8-12.el3.i386.rpm	a22a80ca6ccf6be67117aba13baa33199ec7ec2edf9bfe39d7ca1d08a86207b1	ELSA-2008-0896	el3_u9_i386_patch
	ruby-devel-1.6.8-12.el3.i386.rpm	be35049c289a6272b181a3fbfdfa9c4b60ed4ebaefbefd9075429d6a238c205a	ELSA-2008-0896	el3_i386_latest
	ruby-devel-1.6.8-12.el3.i386.rpm	be35049c289a6272b181a3fbfdfa9c4b60ed4ebaefbefd9075429d6a238c205a	ELSA-2008-0896	el3_u9_i386_patch
	ruby-docs-1.6.8-12.el3.i386.rpm	d164942e72d6395f1d81e201dd8b144391f2cf5a58fcc7c8c53c848bc02bc026	ELSA-2008-0896	el3_i386_latest
	ruby-docs-1.6.8-12.el3.i386.rpm	d164942e72d6395f1d81e201dd8b144391f2cf5a58fcc7c8c53c848bc02bc026	ELSA-2008-0896	el3_u9_i386_patch
	ruby-libs-1.6.8-12.el3.i386.rpm	233c75bc7e006812353d2210dce9a6d16694bb19fdbb61acbcd8702530396d5d	ELSA-2008-0896	el3_i386_latest
	ruby-libs-1.6.8-12.el3.i386.rpm	233c75bc7e006812353d2210dce9a6d16694bb19fdbb61acbcd8702530396d5d	ELSA-2008-0896	el3_u9_i386_patch
	ruby-mode-1.6.8-12.el3.i386.rpm	c8ca8e8bbc8360251005a60d2ed51d4c4fa5107fde8b2f190417de523f38e8e0	ELSA-2008-0896	el3_i386_latest
	ruby-mode-1.6.8-12.el3.i386.rpm	c8ca8e8bbc8360251005a60d2ed51d4c4fa5107fde8b2f190417de523f38e8e0	ELSA-2008-0896	el3_u9_i386_patch
	ruby-tcltk-1.6.8-12.el3.i386.rpm	55ac8c6a1e406093666174069c9f7f9f0ad14cfe33504231f4a9bf04d2e9480e	ELSA-2008-0896	el3_i386_latest
	ruby-tcltk-1.6.8-12.el3.i386.rpm	55ac8c6a1e406093666174069c9f7f9f0ad14cfe33504231f4a9bf04d2e9480e	ELSA-2008-0896	el3_u9_i386_patch
Oracle Linux 3 (x86_64)	ruby-1.6.8-12.el3.src.rpm	5497f1f89b5a667074e9100d704fded03ad65898cb12e90ef278a7047f7c6eeb	ELSA-2008-0896	el3_u9_x86_64_patch
	ruby-1.6.8-12.el3.src.rpm	5497f1f89b5a667074e9100d704fded03ad65898cb12e90ef278a7047f7c6eeb	ELSA-2008-0896	el3_x86_64_latest
	irb-1.6.8-12.el3.x86_64.rpm	65f8f81064baeb4a73743c1a65507b978a9234fa93a8d4afddb647f0836590ee	ELSA-2008-0896	el3_u9_x86_64_patch
	irb-1.6.8-12.el3.x86_64.rpm	65f8f81064baeb4a73743c1a65507b978a9234fa93a8d4afddb647f0836590ee	ELSA-2008-0896	el3_x86_64_latest
	ruby-1.6.8-12.el3.x86_64.rpm	e249a079027498c0b8711a18ed5571221f6cb650df67b367385375e9412a0300	ELSA-2008-0896	el3_u9_x86_64_patch
	ruby-1.6.8-12.el3.x86_64.rpm	e249a079027498c0b8711a18ed5571221f6cb650df67b367385375e9412a0300	ELSA-2008-0896	el3_x86_64_latest
	ruby-devel-1.6.8-12.el3.x86_64.rpm	cdaa957a08860d5e33fe93bd4a83d729df1b0e039aafff7de395dea667ec2473	ELSA-2008-0896	el3_u9_x86_64_patch
	ruby-devel-1.6.8-12.el3.x86_64.rpm	cdaa957a08860d5e33fe93bd4a83d729df1b0e039aafff7de395dea667ec2473	ELSA-2008-0896	el3_x86_64_latest
	ruby-docs-1.6.8-12.el3.x86_64.rpm	7b031765ff0da926ff13e412855a9eae1de460617d16b8541837102eec2c2dd0	ELSA-2008-0896	el3_u9_x86_64_patch
	ruby-docs-1.6.8-12.el3.x86_64.rpm	7b031765ff0da926ff13e412855a9eae1de460617d16b8541837102eec2c2dd0	ELSA-2008-0896	el3_x86_64_latest
	ruby-libs-1.6.8-12.el3.i386.rpm	233c75bc7e006812353d2210dce9a6d16694bb19fdbb61acbcd8702530396d5d	ELSA-2008-0896	el3_u9_x86_64_patch
	ruby-libs-1.6.8-12.el3.i386.rpm	233c75bc7e006812353d2210dce9a6d16694bb19fdbb61acbcd8702530396d5d	ELSA-2008-0896	el3_x86_64_latest
	ruby-libs-1.6.8-12.el3.x86_64.rpm	6287043379273238ff79d65a2c0e9cd30990f91e555a905256c248912e7fb213	ELSA-2008-0896	el3_u9_x86_64_patch
	ruby-libs-1.6.8-12.el3.x86_64.rpm	6287043379273238ff79d65a2c0e9cd30990f91e555a905256c248912e7fb213	ELSA-2008-0896	el3_x86_64_latest
	ruby-mode-1.6.8-12.el3.x86_64.rpm	64c9584e10834d56f4fc61b21dddf32df3e1fc5d0d0180cafb93a8e877447e84	ELSA-2008-0896	el3_u9_x86_64_patch
	ruby-mode-1.6.8-12.el3.x86_64.rpm	64c9584e10834d56f4fc61b21dddf32df3e1fc5d0d0180cafb93a8e877447e84	ELSA-2008-0896	el3_x86_64_latest
	ruby-tcltk-1.6.8-12.el3.x86_64.rpm	f8c2b8857752db7568da39570ac29c79205607e835bd780e6707d3fa5deee615	ELSA-2008-0896	el3_u9_x86_64_patch
	ruby-tcltk-1.6.8-12.el3.x86_64.rpm	f8c2b8857752db7568da39570ac29c79205607e835bd780e6707d3fa5deee615	ELSA-2008-0896	el3_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team