ELSA-2008-0896

ELSA-2008-0896 - ruby security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2008-10-21

Description

[1.6.8-13.el3]
- security fixes. (#461578)
- CVE-2008-3655: multiple insufficient safe mode restrictions
- CVE-2008-3443: Memory allocation failure in Ruby regex engine (remotely exploitable DoS)
- CVE-2008-3905: use of predictable source port and transaction
id in DNS requests done by resolve.rb module.

Related CVEs

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 3 (i386)	ruby-1.6.8-13.el3.src.rpm	a94a54d57223fd1397b09562a83cf23eff5b74838d265313287cc55cae9e2e5d	-	el3_i386_latest
	ruby-1.6.8-13.el3.src.rpm	a94a54d57223fd1397b09562a83cf23eff5b74838d265313287cc55cae9e2e5d	-	el3_u9_i386_patch
	irb-1.6.8-13.el3.i386.rpm	36de5c10019dab3eeb43b65b5c3d868689ac2101b18b9c246937cdc3014e8405	-	el3_i386_latest
	irb-1.6.8-13.el3.i386.rpm	36de5c10019dab3eeb43b65b5c3d868689ac2101b18b9c246937cdc3014e8405	-	el3_u9_i386_patch
	ruby-1.6.8-13.el3.i386.rpm	a3db8a0b8c1f7585ac83f6df76f8487e4067920ceb051d7354f8109e116bb0b1	-	el3_i386_latest
	ruby-1.6.8-13.el3.i386.rpm	a3db8a0b8c1f7585ac83f6df76f8487e4067920ceb051d7354f8109e116bb0b1	-	el3_u9_i386_patch
	ruby-devel-1.6.8-13.el3.i386.rpm	52a32ce420c9f096ea002a5e9de7df80842cd4c39d8733a02dedf1035fd03ad4	-	el3_i386_latest
	ruby-devel-1.6.8-13.el3.i386.rpm	52a32ce420c9f096ea002a5e9de7df80842cd4c39d8733a02dedf1035fd03ad4	-	el3_u9_i386_patch
	ruby-docs-1.6.8-13.el3.i386.rpm	9ef9ad1f4b77a052ce7ed92925bf0540dd3234fb4f491a6e32f73e222e502e8f	-	el3_i386_latest
	ruby-docs-1.6.8-13.el3.i386.rpm	9ef9ad1f4b77a052ce7ed92925bf0540dd3234fb4f491a6e32f73e222e502e8f	-	el3_u9_i386_patch
	ruby-libs-1.6.8-13.el3.i386.rpm	d0fb3a164026023a5b31b0d45f1959bfa9961ae10586527b8007967059c0ef90	-	el3_i386_latest
	ruby-libs-1.6.8-13.el3.i386.rpm	d0fb3a164026023a5b31b0d45f1959bfa9961ae10586527b8007967059c0ef90	-	el3_u9_i386_patch
	ruby-mode-1.6.8-13.el3.i386.rpm	a956ef012b4efb237cb945433af5e77df6f50d7d3f2f3b49afe5eaf0aa868982	-	el3_i386_latest
	ruby-mode-1.6.8-13.el3.i386.rpm	a956ef012b4efb237cb945433af5e77df6f50d7d3f2f3b49afe5eaf0aa868982	-	el3_u9_i386_patch
	ruby-tcltk-1.6.8-13.el3.i386.rpm	f2616dd1515073fcf6ff1a2e7c1e2d20a3e802fcb8184cde60391cee308691c5	-	el3_i386_latest
	ruby-tcltk-1.6.8-13.el3.i386.rpm	f2616dd1515073fcf6ff1a2e7c1e2d20a3e802fcb8184cde60391cee308691c5	-	el3_u9_i386_patch
Oracle Linux 3 (x86_64)	ruby-1.6.8-13.el3.src.rpm	a94a54d57223fd1397b09562a83cf23eff5b74838d265313287cc55cae9e2e5d	-	el3_u9_x86_64_patch
	ruby-1.6.8-13.el3.src.rpm	a94a54d57223fd1397b09562a83cf23eff5b74838d265313287cc55cae9e2e5d	-	el3_x86_64_latest
	irb-1.6.8-13.el3.x86_64.rpm	980c5d7b1a7ecf88c4837ca6e72232fd213b23f851c937a331f8b9913b3cd69b	-	el3_u9_x86_64_patch
	irb-1.6.8-13.el3.x86_64.rpm	980c5d7b1a7ecf88c4837ca6e72232fd213b23f851c937a331f8b9913b3cd69b	-	el3_x86_64_latest
	ruby-1.6.8-13.el3.x86_64.rpm	994afd96bef03f243cfa995cd7636bbca552e471d29e79d87cc50e2f963b2bef	-	el3_u9_x86_64_patch
	ruby-1.6.8-13.el3.x86_64.rpm	994afd96bef03f243cfa995cd7636bbca552e471d29e79d87cc50e2f963b2bef	-	el3_x86_64_latest
	ruby-devel-1.6.8-13.el3.x86_64.rpm	92b4ee646e05a4624508affc8195af60f3ea335ec82d0f04e95739a92257968a	-	el3_u9_x86_64_patch
	ruby-devel-1.6.8-13.el3.x86_64.rpm	92b4ee646e05a4624508affc8195af60f3ea335ec82d0f04e95739a92257968a	-	el3_x86_64_latest
	ruby-docs-1.6.8-13.el3.x86_64.rpm	18f4bf6419db684e68a73626e49ea535c827ce30afc0b97ed380a145e9fb75d1	-	el3_u9_x86_64_patch
	ruby-docs-1.6.8-13.el3.x86_64.rpm	18f4bf6419db684e68a73626e49ea535c827ce30afc0b97ed380a145e9fb75d1	-	el3_x86_64_latest
	ruby-libs-1.6.8-13.el3.i386.rpm	d0fb3a164026023a5b31b0d45f1959bfa9961ae10586527b8007967059c0ef90	-	el3_u9_x86_64_patch
	ruby-libs-1.6.8-13.el3.i386.rpm	d0fb3a164026023a5b31b0d45f1959bfa9961ae10586527b8007967059c0ef90	-	el3_x86_64_latest
	ruby-libs-1.6.8-13.el3.x86_64.rpm	2b925fee3b1b92047b4dfded1fbef15e857f5a800f4f87a704c003bf8fd95dcc	-	el3_u9_x86_64_patch
	ruby-libs-1.6.8-13.el3.x86_64.rpm	2b925fee3b1b92047b4dfded1fbef15e857f5a800f4f87a704c003bf8fd95dcc	-	el3_x86_64_latest
	ruby-mode-1.6.8-13.el3.x86_64.rpm	383997db15ac369941522577a5c46394bd6e4326eff79b86b5b164530b5e1100	-	el3_u9_x86_64_patch
	ruby-mode-1.6.8-13.el3.x86_64.rpm	383997db15ac369941522577a5c46394bd6e4326eff79b86b5b164530b5e1100	-	el3_x86_64_latest
	ruby-tcltk-1.6.8-13.el3.x86_64.rpm	21e32389c087705457bf48f6d9d425c4696e9a8bc4b6fcc3c0e60c72d1b3b864	-	el3_u9_x86_64_patch
	ruby-tcltk-1.6.8-13.el3.x86_64.rpm	21e32389c087705457bf48f6d9d425c4696e9a8bc4b6fcc3c0e60c72d1b3b864	-	el3_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team