ELSA-2012-0070

ELSA-2012-0070 - ruby security update

Type:SECURITY
Severity:MODERATE
Release Date:2012-01-30

Description


[1.8.5-22.1]
- Properly initialize the random number generator when forking new process
* ruby-1.8.7-CVE-2011-3009.patch
- Related: rhbz#768829

[1.8.5-21.1]
- Revert accidential move of tcl/tk libraries.
- Related: rhbz#768829

[1.8.5-20.1]
- Address CVE-2011-4815 "DoS (excessive CPU use) via hash meet-in-the-middle
attacks (oCERT-2011-003)"
* ruby-1.8.7-CVE-2011-4815.patch
- Resolves: rhbz#768829


Related CVEs


CVE-2011-3009
CVE-2011-4815

Updated Packages


Release/ArchitectureFilenameMD5sumSuperseded By Advisory
Oracle Linux 4 (i386) ruby-1.8.1-18.el4.src.rpm215f161c9d4a85f1ce7aecf83f06da10-
irb-1.8.1-18.el4.i386.rpm61d57f162b96fc1143b9bdbd97a8fae9-
ruby-1.8.1-18.el4.i386.rpm6514a950a57ce27020be43674df5bddb-
ruby-devel-1.8.1-18.el4.i386.rpmb2b26089d9e7a246cddb557d332dcc4d-
ruby-docs-1.8.1-18.el4.i386.rpm7418778016024b81c3ae12ddb4154e9b-
ruby-libs-1.8.1-18.el4.i386.rpm1e50accbf62b0e5089eb72ef52af3711-
ruby-mode-1.8.1-18.el4.i386.rpm852e98cd82eb8cc1ab8e23bf0e36283e-
ruby-tcltk-1.8.1-18.el4.i386.rpm3df8cbfaab0239517289edc48c1bc372-
Oracle Linux 4 (ia64) ruby-1.8.1-18.el4.src.rpm215f161c9d4a85f1ce7aecf83f06da10-
irb-1.8.1-18.el4.ia64.rpmfe4d851225e1a38373eec7b531d2a1d6-
ruby-1.8.1-18.el4.ia64.rpm46733d2d90154db518136537f57b547e-
ruby-devel-1.8.1-18.el4.ia64.rpm1e1a4dbb60291af7bc565020e0b4aa74-
ruby-docs-1.8.1-18.el4.ia64.rpmd94998e0c91f74478faf690f415498dc-
ruby-libs-1.8.1-18.el4.i386.rpm1e50accbf62b0e5089eb72ef52af3711-
ruby-libs-1.8.1-18.el4.ia64.rpm6380d0ba78bebb4e339cb757f215715e-
ruby-mode-1.8.1-18.el4.ia64.rpm4d52db4263cedaef9a4969a99fadd3f1-
ruby-tcltk-1.8.1-18.el4.ia64.rpmf7f5e410a12113bc26e6fbffeb3017e8-
Oracle Linux 4 (x86_64) ruby-1.8.1-18.el4.src.rpm215f161c9d4a85f1ce7aecf83f06da10-
irb-1.8.1-18.el4.x86_64.rpm4aedacfaac17453f0fcb12bad94dd426-
ruby-1.8.1-18.el4.x86_64.rpmeb3b0aa667894e8a70e60b1164833ecc-
ruby-devel-1.8.1-18.el4.x86_64.rpm356f13981e567c89c9cb676c731296a6-
ruby-docs-1.8.1-18.el4.x86_64.rpm11f4b7df1ca6cc737f8807998319fc2f-
ruby-libs-1.8.1-18.el4.i386.rpm1e50accbf62b0e5089eb72ef52af3711-
ruby-libs-1.8.1-18.el4.x86_64.rpm1047aa497658ea07a75e44e61927fdfb-
ruby-mode-1.8.1-18.el4.x86_64.rpmc550c09c480a497422be2156427dcf5a-
ruby-tcltk-1.8.1-18.el4.x86_64.rpmb55da7ed6e532e512c8ba3b45cf4e9d2-
Oracle Linux 5 (i386) ruby-1.8.5-22.el5_7.1.src.rpme78258a97f3cb15bc2def95c36687098ELSA-2013-1090
ruby-1.8.5-22.el5_7.1.i386.rpm73773e9f8d7d600bdb301c58766811acELSA-2013-1090
ruby-devel-1.8.5-22.el5_7.1.i386.rpm693f86b41398b48de1cd4923954cce54ELSA-2013-1090
ruby-docs-1.8.5-22.el5_7.1.i386.rpmc63d1eccb44f5bcab2041c39437cb95fELSA-2013-1090
ruby-irb-1.8.5-22.el5_7.1.i386.rpmdec59bc54184700ec0e0f190599585f6ELSA-2013-1090
ruby-libs-1.8.5-22.el5_7.1.i386.rpm3793403838050c2b55c093b4bee6c1f4ELSA-2013-1090
ruby-mode-1.8.5-22.el5_7.1.i386.rpmd81be6fb53bae1e3901c6ed7812fa160ELSA-2013-1090
ruby-rdoc-1.8.5-22.el5_7.1.i386.rpmaca615a0b4fcf46246e95b873b19e983ELSA-2013-1090
ruby-ri-1.8.5-22.el5_7.1.i386.rpmcf4e7be758259053e4bc37b074b3edeaELSA-2013-1090
ruby-tcltk-1.8.5-22.el5_7.1.i386.rpm3af6571b51b7f3ecd94c502938bbbc79ELSA-2013-1090
Oracle Linux 5 (ia64) ruby-1.8.5-22.el5_7.1.src.rpme78258a97f3cb15bc2def95c36687098ELSA-2013-1090
ruby-1.8.5-22.el5_7.1.ia64.rpm84aeb1d35e991e145464298d7353860cELSA-2013-1090
ruby-devel-1.8.5-22.el5_7.1.ia64.rpmcf3a77a5854a113467dae449fe92f0baELSA-2013-1090
ruby-docs-1.8.5-22.el5_7.1.ia64.rpm9b875ac0d60977ae26e7c55056a89261ELSA-2013-1090
ruby-irb-1.8.5-22.el5_7.1.ia64.rpmbd14c9412bd123a1e158ddc2b5fbea81ELSA-2013-1090
ruby-libs-1.8.5-22.el5_7.1.ia64.rpm02fc101a0bf2dbfeeafe3ba26b6a8002ELSA-2013-1090
ruby-mode-1.8.5-22.el5_7.1.ia64.rpm105d9ccae37021e2590f1a542c41fcb4ELSA-2013-1090
ruby-rdoc-1.8.5-22.el5_7.1.ia64.rpm687d3b5a763997590d74c0ad0aa330d9ELSA-2013-1090
ruby-ri-1.8.5-22.el5_7.1.ia64.rpme9eb0aac634bd5c83e7724cc10052f70ELSA-2013-1090
ruby-tcltk-1.8.5-22.el5_7.1.ia64.rpm71aeca4550ff450856ca3e39736a8844ELSA-2013-1090
Oracle Linux 5 (x86_64) ruby-1.8.5-22.el5_7.1.src.rpme78258a97f3cb15bc2def95c36687098ELSA-2013-1090
ruby-1.8.5-22.el5_7.1.x86_64.rpm167f32f639fc34c4c1337ff0732f6f2dELSA-2013-1090
ruby-devel-1.8.5-22.el5_7.1.i386.rpm693f86b41398b48de1cd4923954cce54ELSA-2013-1090
ruby-devel-1.8.5-22.el5_7.1.x86_64.rpm95068392f47129e0bf6b85e2cd179182ELSA-2013-1090
ruby-docs-1.8.5-22.el5_7.1.x86_64.rpm95f746adb5119454ff66628b82c6c9f6ELSA-2013-1090
ruby-irb-1.8.5-22.el5_7.1.x86_64.rpm3317c4bf808835adb48c105db73a6962ELSA-2013-1090
ruby-libs-1.8.5-22.el5_7.1.i386.rpm3793403838050c2b55c093b4bee6c1f4ELSA-2013-1090
ruby-libs-1.8.5-22.el5_7.1.x86_64.rpmec815068422af91afe46f2225c0f1d76ELSA-2013-1090
ruby-mode-1.8.5-22.el5_7.1.x86_64.rpmac193c9766eb47ddb32a572e138526c2ELSA-2013-1090
ruby-rdoc-1.8.5-22.el5_7.1.x86_64.rpm04dad5543a532e9347ad7a418008495cELSA-2013-1090
ruby-ri-1.8.5-22.el5_7.1.x86_64.rpm2fb05458925d662a3c69a2b11c025ad7ELSA-2013-1090
ruby-tcltk-1.8.5-22.el5_7.1.x86_64.rpm7bebfb944bd23d8fe9849f1bf53fa8c9ELSA-2013-1090



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete