ELSA-2011-0909

ELSA-2011-0909 - ruby security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2011-06-28

Description

[1.8.5-19.el5_6.1]
- Address CVE-2011-1004 'Symlink race condition by removing directory trees in
fileutils module'
* ruby-1.8.7-CVE-2011-1004.patch
- Address CVE-2011-1005 'Untrusted codes able to modify arbitrary strings'
* ruby-1.8.7-CVE-2011-1005.patch
- Address CVE-2011-0188 'memory corruption in BigDecimal on 64bit platforms'
* ruby-1.8.7-CVE-2011-0188.patch
- Address CVE-CVE-2010-0541 'Ruby WEBrick javascript injection flaw'
* ruby-1.8.7-CVE-2010-0541.patch
- Address CVE-CVE-2009-4492 'ruby WEBrick log escape sequence'
* ruby-1.8.6-CVE-2009-4492.patch
- Resolves: rhbz#709957

Related CVEs

CVE-2009-4492

CVE-2010-0541

CVE-2011-0188

CVE-2011-1004

CVE-2011-1005

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 5 (i386)	ruby-1.8.5-19.el5_6.1.src.rpm	4ef38873766c2be52781fa71943fc528	ELSA-2013-1090
	ruby-1.8.5-19.el5_6.1.i386.rpm	bc6cbd9c2b8dfb8f28f0b1c5d42ba785	ELSA-2013-1090
	ruby-devel-1.8.5-19.el5_6.1.i386.rpm	ae483ee557c56c4c2665534fc9924189	ELSA-2013-1090
	ruby-docs-1.8.5-19.el5_6.1.i386.rpm	2217f5f1d927fb4f7e75ab37c165fe9f	ELSA-2013-1090
	ruby-irb-1.8.5-19.el5_6.1.i386.rpm	f2029a3ba23a91eab2829e6a6620c571	ELSA-2013-1090
	ruby-libs-1.8.5-19.el5_6.1.i386.rpm	1d5d9b15f5dd94fadff2fbcc01362331	ELSA-2013-1090
	ruby-mode-1.8.5-19.el5_6.1.i386.rpm	81a599b8961592bee9bac2895ac4f32f	ELSA-2013-1090
	ruby-rdoc-1.8.5-19.el5_6.1.i386.rpm	329ad00970fdbc9ac65ebc5eb62889e1	ELSA-2013-1090
	ruby-ri-1.8.5-19.el5_6.1.i386.rpm	68665806727c6129c6de3d6b954dc239	ELSA-2013-1090
	ruby-tcltk-1.8.5-19.el5_6.1.i386.rpm	9019b02c7d761a1d57f13b6bce1586af	ELSA-2013-1090
Oracle Linux 5 (ia64)	ruby-1.8.5-19.el5_6.1.src.rpm	4ef38873766c2be52781fa71943fc528	ELSA-2013-1090
	ruby-1.8.5-19.el5_6.1.ia64.rpm	14be470918553f72bcedfcac73a7d130	ELSA-2013-1090
	ruby-devel-1.8.5-19.el5_6.1.ia64.rpm	00db75a79653c4c598bdbd98590da362	ELSA-2013-1090
	ruby-docs-1.8.5-19.el5_6.1.ia64.rpm	49badf6f6a82e3a8b221e345cf82b3c3	ELSA-2013-1090
	ruby-irb-1.8.5-19.el5_6.1.ia64.rpm	bc70113cd1461fc5e85af6295fc6735f	ELSA-2013-1090
	ruby-libs-1.8.5-19.el5_6.1.ia64.rpm	1895f7e91ed054cb974b0baeaed266d4	ELSA-2013-1090
	ruby-mode-1.8.5-19.el5_6.1.ia64.rpm	0e2624d3f39d5ea6c590cdaa35f774dc	ELSA-2013-1090
	ruby-rdoc-1.8.5-19.el5_6.1.ia64.rpm	49fe582c7fdc62f1220984a97ec7038d	ELSA-2013-1090
	ruby-ri-1.8.5-19.el5_6.1.ia64.rpm	158228ec0d0523a2d5bd171eaeca4628	ELSA-2013-1090
	ruby-tcltk-1.8.5-19.el5_6.1.ia64.rpm	6fcde655cb002f310f4f78a0fdfc318c	ELSA-2013-1090
Oracle Linux 5 (x86_64)	ruby-1.8.5-19.el5_6.1.src.rpm	4ef38873766c2be52781fa71943fc528	ELSA-2013-1090
	ruby-1.8.5-19.el5_6.1.x86_64.rpm	0f0f22c93025d11ac62d0070d3dd5128	ELSA-2013-1090
	ruby-devel-1.8.5-19.el5_6.1.i386.rpm	ae483ee557c56c4c2665534fc9924189	ELSA-2013-1090
	ruby-devel-1.8.5-19.el5_6.1.x86_64.rpm	97697e4a0866bf99af4e7c2beb4bb49c	ELSA-2013-1090
	ruby-docs-1.8.5-19.el5_6.1.x86_64.rpm	69573200db1f94f5fb2180abd82bd47c	ELSA-2013-1090
	ruby-irb-1.8.5-19.el5_6.1.x86_64.rpm	e5b898d6d17153403ab2bff39c451e23	ELSA-2013-1090
	ruby-libs-1.8.5-19.el5_6.1.i386.rpm	1d5d9b15f5dd94fadff2fbcc01362331	ELSA-2013-1090
	ruby-libs-1.8.5-19.el5_6.1.x86_64.rpm	4ecb7ff81e09d598efe06bab16de8da9	ELSA-2013-1090
	ruby-mode-1.8.5-19.el5_6.1.x86_64.rpm	f223afaeb2d2bd7490146b96038ddf3e	ELSA-2013-1090
	ruby-rdoc-1.8.5-19.el5_6.1.x86_64.rpm	d12765a73a532dee71e673b5b1d85ca3	ELSA-2013-1090
	ruby-ri-1.8.5-19.el5_6.1.x86_64.rpm	4df0250ef4596a328d77bd2537829868	ELSA-2013-1090
	ruby-tcltk-1.8.5-19.el5_6.1.x86_64.rpm	2cf7c6a910d0b18cb09749bc52a5d046	ELSA-2013-1090

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team