ELSA-2012-0070

ELSA-2012-0070 - ruby security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2012-01-30

Description

[1.8.5-22.1]
- Properly initialize the random number generator when forking new process
* ruby-1.8.7-CVE-2011-3009.patch
- Related: rhbz#768829

[1.8.5-21.1]
- Revert accidential move of tcl/tk libraries.
- Related: rhbz#768829

[1.8.5-20.1]
- Address CVE-2011-4815 "DoS (excessive CPU use) via hash meet-in-the-middle
attacks (oCERT-2011-003)"
* ruby-1.8.7-CVE-2011-4815.patch
- Resolves: rhbz#768829

Related CVEs

CVE-2011-3009

CVE-2011-4815

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 4 (i386)	ruby-1.8.1-18.el4.src.rpm	4b5eae2f6e32fe47f8b6584d0ce7a290c9b612e6078ca7f4247272fedc38ffb6	-	el4_i386_latest
	irb-1.8.1-18.el4.i386.rpm	21a4f46f3fd5a0debfe8a18d53f3f17b99d74709a04188801118894c80ce9884	-	el4_i386_latest
	ruby-1.8.1-18.el4.i386.rpm	35ae5087f16c6fdb8aeffed268041f1b565c9d2216d5c531469763da2924ce50	-	el4_i386_latest
	ruby-devel-1.8.1-18.el4.i386.rpm	1f2830e4c0cc4f56b6acb0d700c4c54f30955bf3a62067da036505ea8348c7d5	-	el4_i386_latest
	ruby-docs-1.8.1-18.el4.i386.rpm	90a7a3b059c29e3375f54b536343e52a3840d610d5a179cf7c41b338db11cb0d	-	el4_i386_latest
	ruby-libs-1.8.1-18.el4.i386.rpm	ff163955977a9824cc7cdaa181f7ed03e01b06cd37bb5bd2285ecc34e6869021	-	el4_i386_latest
	ruby-mode-1.8.1-18.el4.i386.rpm	604cedd446c984ec5851a47d9751f77b3ea3ec36734cc0f6ed6b899353700974	-	el4_i386_latest
	ruby-tcltk-1.8.1-18.el4.i386.rpm	749655d1c7bb226dd885d9f5a7571eb42f8f0baeb6f2d2ba4ee1cdf66bd87819	-	el4_i386_latest
Oracle Linux 4 (ia64)	ruby-1.8.1-18.el4.src.rpm	4b5eae2f6e32fe47f8b6584d0ce7a290c9b612e6078ca7f4247272fedc38ffb6	-	el4_ia64_latest
	irb-1.8.1-18.el4.ia64.rpm	5f3dbb6339201cb81a204f9dc7fe9f13561a0aa0c04df9a69f63b7e111a619f5	-	el4_ia64_latest
	ruby-1.8.1-18.el4.ia64.rpm	749e6f89afc82bcdc207523c7714a87ff91192562f619a7d6f525ed36f4e3917	-	el4_ia64_latest
	ruby-devel-1.8.1-18.el4.ia64.rpm	7a7288e0ad844fefe456dfd27df98c99090f451374e7453f7271f4979ed9c717	-	el4_ia64_latest
	ruby-docs-1.8.1-18.el4.ia64.rpm	cca84bb12a24e1e41039cc2df33a8a83b4c30c8da3f12fe279e221bec99c8e1a	-	el4_ia64_latest
	ruby-libs-1.8.1-18.el4.i386.rpm	ff163955977a9824cc7cdaa181f7ed03e01b06cd37bb5bd2285ecc34e6869021	-	el4_ia64_latest
	ruby-libs-1.8.1-18.el4.ia64.rpm	9a4994b585869e5d1e235a3016b59200c96a68878326db229268ec848fba431a	-	el4_ia64_latest
	ruby-mode-1.8.1-18.el4.ia64.rpm	6f9cba640fefd931f6633acb637500b1846d1ea9b836b34ca0c4719a13ac355c	-	el4_ia64_latest
	ruby-tcltk-1.8.1-18.el4.ia64.rpm	0b18f2016e506daaeabae18e5905c9a69642c9fa7131a8217569b82695395802	-	el4_ia64_latest
Oracle Linux 4 (x86_64)	ruby-1.8.1-18.el4.src.rpm	4b5eae2f6e32fe47f8b6584d0ce7a290c9b612e6078ca7f4247272fedc38ffb6	-	el4_x86_64_latest
	irb-1.8.1-18.el4.x86_64.rpm	9b514451ff973d3696cbc9b29ba5301fb633f8a9584f443fdf51a11ede0b2d37	-	el4_x86_64_latest
	ruby-1.8.1-18.el4.x86_64.rpm	a377acd496866fbd39f74d7c78fe3b6da66fadb26b467b7ae5d2153188139797	-	el4_x86_64_latest
	ruby-devel-1.8.1-18.el4.x86_64.rpm	f6031aaeff0915a4a7be9a2799efc612d654093f258b37c500b51c6cd293e0f1	-	el4_x86_64_latest
	ruby-docs-1.8.1-18.el4.x86_64.rpm	a5a0d9074da7f66c071e358860eedd1145cf6226edadfe74d0bc21a93641424c	-	el4_x86_64_latest
	ruby-libs-1.8.1-18.el4.i386.rpm	ff163955977a9824cc7cdaa181f7ed03e01b06cd37bb5bd2285ecc34e6869021	-	el4_x86_64_latest
	ruby-libs-1.8.1-18.el4.x86_64.rpm	255476dfc3ac31e4f6336e86280158bd55d6218d4a94b59607a346c60f33e7c7	-	el4_x86_64_latest
	ruby-mode-1.8.1-18.el4.x86_64.rpm	1a3fd8e1edd88aea29ec5e2c47ecc4af851016d73a0fc53af14f21a08763d4ca	-	el4_x86_64_latest
	ruby-tcltk-1.8.1-18.el4.x86_64.rpm	4edcaf55930508e719805c6bd680493e27e62e6384a57b3a1b393a7c08db85e1	-	el4_x86_64_latest
Oracle Linux 5 (i386)	ruby-1.8.5-22.el5_7.1.src.rpm	7eaa3d484f1f1cbe564082efda29fcafb6db5c323d8df07041ee23a533f31b21	ELSA-2013-1090	ol5_i386_latest
	ruby-1.8.5-22.el5_7.1.src.rpm	7eaa3d484f1f1cbe564082efda29fcafb6db5c323d8df07041ee23a533f31b21	ELSA-2013-1090	ol5_u7_i386_patch
	ruby-1.8.5-22.el5_7.1.i386.rpm	0604e2b810d4fe84b1ba88ff3ed0562f2c8894a8dcc8f295f28183d2c2fd83a0	ELSA-2013-1090	ol5_i386_latest
	ruby-1.8.5-22.el5_7.1.i386.rpm	0604e2b810d4fe84b1ba88ff3ed0562f2c8894a8dcc8f295f28183d2c2fd83a0	ELSA-2013-1090	ol5_u7_i386_patch
	ruby-devel-1.8.5-22.el5_7.1.i386.rpm	34ed4cfc2ec49e9664f06c0717df3a633f3ceed050ebc7c90e784c78f6c4d54a	ELSA-2013-1090	ol5_i386_latest
	ruby-devel-1.8.5-22.el5_7.1.i386.rpm	34ed4cfc2ec49e9664f06c0717df3a633f3ceed050ebc7c90e784c78f6c4d54a	ELSA-2013-1090	ol5_u7_i386_patch
	ruby-docs-1.8.5-22.el5_7.1.i386.rpm	9b726b3d2531700e8ce33a5b93d9ea232b3bf75afe04661520c9daab9760533c	ELSA-2013-1090	ol5_i386_latest
	ruby-docs-1.8.5-22.el5_7.1.i386.rpm	9b726b3d2531700e8ce33a5b93d9ea232b3bf75afe04661520c9daab9760533c	ELSA-2013-1090	ol5_u7_i386_patch
	ruby-irb-1.8.5-22.el5_7.1.i386.rpm	51e1a216a19fa1593fb31c451370e595dc06349870c9fcaea842f239f479c6fe	ELSA-2013-1090	ol5_i386_latest
	ruby-irb-1.8.5-22.el5_7.1.i386.rpm	51e1a216a19fa1593fb31c451370e595dc06349870c9fcaea842f239f479c6fe	ELSA-2013-1090	ol5_u7_i386_patch
	ruby-libs-1.8.5-22.el5_7.1.i386.rpm	8b91d8936d00373de887fe9b12c983a42de93f33efabd798fe5a041b0791eac4	ELSA-2013-1090	ol5_i386_latest
	ruby-libs-1.8.5-22.el5_7.1.i386.rpm	8b91d8936d00373de887fe9b12c983a42de93f33efabd798fe5a041b0791eac4	ELSA-2013-1090	ol5_u7_i386_patch
	ruby-mode-1.8.5-22.el5_7.1.i386.rpm	ade5b4a03c967444185399ee728de662bdab71a5a07a026fb19af31bc15a0fe5	ELSA-2013-1090	ol5_i386_latest
	ruby-mode-1.8.5-22.el5_7.1.i386.rpm	ade5b4a03c967444185399ee728de662bdab71a5a07a026fb19af31bc15a0fe5	ELSA-2013-1090	ol5_u7_i386_patch
	ruby-rdoc-1.8.5-22.el5_7.1.i386.rpm	bd5bf708db88c4dce5f03fc1575686a2a9a6374f4c98ff63e777ab546bd67099	ELSA-2013-1090	ol5_i386_latest
	ruby-rdoc-1.8.5-22.el5_7.1.i386.rpm	bd5bf708db88c4dce5f03fc1575686a2a9a6374f4c98ff63e777ab546bd67099	ELSA-2013-1090	ol5_u7_i386_patch
	ruby-ri-1.8.5-22.el5_7.1.i386.rpm	1b6484f4d210c74e0bf3416c27ee9bd13ad01193327bf30a6d5e25dd7f69f165	ELSA-2013-1090	ol5_i386_latest
	ruby-ri-1.8.5-22.el5_7.1.i386.rpm	1b6484f4d210c74e0bf3416c27ee9bd13ad01193327bf30a6d5e25dd7f69f165	ELSA-2013-1090	ol5_u7_i386_patch
	ruby-tcltk-1.8.5-22.el5_7.1.i386.rpm	918c9b7990fc0abb628907dc573a4cc45b5f35c75cccf1537438485dc098c47d	ELSA-2013-1090	ol5_i386_latest
	ruby-tcltk-1.8.5-22.el5_7.1.i386.rpm	918c9b7990fc0abb628907dc573a4cc45b5f35c75cccf1537438485dc098c47d	ELSA-2013-1090	ol5_u7_i386_patch
Oracle Linux 5 (ia64)	ruby-1.8.5-22.el5_7.1.src.rpm	7eaa3d484f1f1cbe564082efda29fcafb6db5c323d8df07041ee23a533f31b21	ELSA-2013-1090	ol5_ia64_latest
	ruby-1.8.5-22.el5_7.1.src.rpm	7eaa3d484f1f1cbe564082efda29fcafb6db5c323d8df07041ee23a533f31b21	ELSA-2013-1090	ol5_u7_ia64_patch
	ruby-1.8.5-22.el5_7.1.ia64.rpm	0e1ae8592d5b02455390af214fa3f8484e4082d3a840483738d1f01e93bb78a7	ELSA-2013-1090	ol5_ia64_latest
	ruby-1.8.5-22.el5_7.1.ia64.rpm	0e1ae8592d5b02455390af214fa3f8484e4082d3a840483738d1f01e93bb78a7	ELSA-2013-1090	ol5_u7_ia64_patch
	ruby-devel-1.8.5-22.el5_7.1.ia64.rpm	5afd1deebcb126d8a7f4f07f80e09636772a1a8db098a9f33c9a48d3dfdbbc07	ELSA-2013-1090	ol5_ia64_latest
	ruby-devel-1.8.5-22.el5_7.1.ia64.rpm	5afd1deebcb126d8a7f4f07f80e09636772a1a8db098a9f33c9a48d3dfdbbc07	ELSA-2013-1090	ol5_u7_ia64_patch
	ruby-docs-1.8.5-22.el5_7.1.ia64.rpm	184890c5248a40410142e44647634cbadd6b17f35fb857ad2d98a392f08db402	ELSA-2013-1090	ol5_ia64_latest
	ruby-docs-1.8.5-22.el5_7.1.ia64.rpm	184890c5248a40410142e44647634cbadd6b17f35fb857ad2d98a392f08db402	ELSA-2013-1090	ol5_u7_ia64_patch
	ruby-irb-1.8.5-22.el5_7.1.ia64.rpm	cb201b72f1fdcc3fcf93928120367f48518d46ff446ea9309047d7366a1f7cab	ELSA-2013-1090	ol5_ia64_latest
	ruby-irb-1.8.5-22.el5_7.1.ia64.rpm	cb201b72f1fdcc3fcf93928120367f48518d46ff446ea9309047d7366a1f7cab	ELSA-2013-1090	ol5_u7_ia64_patch
	ruby-libs-1.8.5-22.el5_7.1.ia64.rpm	ea72e6ba40b510620e10b580e809b5e434d5c9519c99fa9eaf887561c1e6ce4b	ELSA-2013-1090	ol5_ia64_latest
	ruby-libs-1.8.5-22.el5_7.1.ia64.rpm	ea72e6ba40b510620e10b580e809b5e434d5c9519c99fa9eaf887561c1e6ce4b	ELSA-2013-1090	ol5_u7_ia64_patch
	ruby-mode-1.8.5-22.el5_7.1.ia64.rpm	35aec0ac780ac3c91118c3b3ddfe6d3d46086cc94e69e4ea88e2c75803aec0b8	ELSA-2013-1090	ol5_ia64_latest
	ruby-mode-1.8.5-22.el5_7.1.ia64.rpm	35aec0ac780ac3c91118c3b3ddfe6d3d46086cc94e69e4ea88e2c75803aec0b8	ELSA-2013-1090	ol5_u7_ia64_patch
	ruby-rdoc-1.8.5-22.el5_7.1.ia64.rpm	8f5e245a4aac1e408d777024d5211e8bc384fbc1ba205b25ab58cc3f6edd3ad8	ELSA-2013-1090	ol5_ia64_latest
	ruby-rdoc-1.8.5-22.el5_7.1.ia64.rpm	8f5e245a4aac1e408d777024d5211e8bc384fbc1ba205b25ab58cc3f6edd3ad8	ELSA-2013-1090	ol5_u7_ia64_patch
	ruby-ri-1.8.5-22.el5_7.1.ia64.rpm	419b2636d2d644efacd2ac30aebed74990cdc1eb477c9e04b8fdfe1ad90d7ddd	ELSA-2013-1090	ol5_ia64_latest
	ruby-ri-1.8.5-22.el5_7.1.ia64.rpm	419b2636d2d644efacd2ac30aebed74990cdc1eb477c9e04b8fdfe1ad90d7ddd	ELSA-2013-1090	ol5_u7_ia64_patch
	ruby-tcltk-1.8.5-22.el5_7.1.ia64.rpm	22a6c74891a0e3880601820e8824149c5327de01ca971c44add50f57a2c2c4b5	ELSA-2013-1090	ol5_ia64_latest
	ruby-tcltk-1.8.5-22.el5_7.1.ia64.rpm	22a6c74891a0e3880601820e8824149c5327de01ca971c44add50f57a2c2c4b5	ELSA-2013-1090	ol5_u7_ia64_patch
Oracle Linux 5 (x86_64)	ruby-1.8.5-22.el5_7.1.src.rpm	7eaa3d484f1f1cbe564082efda29fcafb6db5c323d8df07041ee23a533f31b21	ELSA-2013-1090	ol5_u7_x86_64_patch
	ruby-1.8.5-22.el5_7.1.src.rpm	7eaa3d484f1f1cbe564082efda29fcafb6db5c323d8df07041ee23a533f31b21	ELSA-2013-1090	ol5_x86_64_latest
	ruby-1.8.5-22.el5_7.1.x86_64.rpm	d05a8d9e4c4ee2d19a5a4e4951c64304b98de6b448b5472e817e952d6b62df8e	ELSA-2013-1090	ol5_u7_x86_64_patch
	ruby-1.8.5-22.el5_7.1.x86_64.rpm	d05a8d9e4c4ee2d19a5a4e4951c64304b98de6b448b5472e817e952d6b62df8e	ELSA-2013-1090	ol5_x86_64_latest
	ruby-devel-1.8.5-22.el5_7.1.i386.rpm	34ed4cfc2ec49e9664f06c0717df3a633f3ceed050ebc7c90e784c78f6c4d54a	ELSA-2013-1090	ol5_u7_x86_64_patch
	ruby-devel-1.8.5-22.el5_7.1.i386.rpm	34ed4cfc2ec49e9664f06c0717df3a633f3ceed050ebc7c90e784c78f6c4d54a	ELSA-2013-1090	ol5_x86_64_latest
	ruby-devel-1.8.5-22.el5_7.1.x86_64.rpm	7f38297a6a4409eb22ad976ee488b16fdccd28438073fd7710feead631c753c3	ELSA-2013-1090	ol5_u7_x86_64_patch
	ruby-devel-1.8.5-22.el5_7.1.x86_64.rpm	7f38297a6a4409eb22ad976ee488b16fdccd28438073fd7710feead631c753c3	ELSA-2013-1090	ol5_x86_64_latest
	ruby-docs-1.8.5-22.el5_7.1.x86_64.rpm	c81ee1652e9fd3b518ae04ea91b3d9437300d9db1946c3ebf0387d6a943dedac	ELSA-2013-1090	ol5_u7_x86_64_patch
	ruby-docs-1.8.5-22.el5_7.1.x86_64.rpm	c81ee1652e9fd3b518ae04ea91b3d9437300d9db1946c3ebf0387d6a943dedac	ELSA-2013-1090	ol5_x86_64_latest
	ruby-irb-1.8.5-22.el5_7.1.x86_64.rpm	a9c20ab00c239ae8038c4449758f8e139f6d470237a38860533ce7290e118ba0	ELSA-2013-1090	ol5_u7_x86_64_patch
	ruby-irb-1.8.5-22.el5_7.1.x86_64.rpm	a9c20ab00c239ae8038c4449758f8e139f6d470237a38860533ce7290e118ba0	ELSA-2013-1090	ol5_x86_64_latest
	ruby-libs-1.8.5-22.el5_7.1.i386.rpm	8b91d8936d00373de887fe9b12c983a42de93f33efabd798fe5a041b0791eac4	ELSA-2013-1090	ol5_u7_x86_64_patch
	ruby-libs-1.8.5-22.el5_7.1.i386.rpm	8b91d8936d00373de887fe9b12c983a42de93f33efabd798fe5a041b0791eac4	ELSA-2013-1090	ol5_x86_64_latest
	ruby-libs-1.8.5-22.el5_7.1.x86_64.rpm	f626a172b8ddb9720a29645de5e55e781186b59ee5d16ee40f041a9de3f18201	ELSA-2013-1090	ol5_u7_x86_64_patch
	ruby-libs-1.8.5-22.el5_7.1.x86_64.rpm	f626a172b8ddb9720a29645de5e55e781186b59ee5d16ee40f041a9de3f18201	ELSA-2013-1090	ol5_x86_64_latest
	ruby-mode-1.8.5-22.el5_7.1.x86_64.rpm	636b6be91011f9f5b5898dc5e24bdc055dcf8c043c6a32565ecb5a41bde067c3	ELSA-2013-1090	ol5_u7_x86_64_patch
	ruby-mode-1.8.5-22.el5_7.1.x86_64.rpm	636b6be91011f9f5b5898dc5e24bdc055dcf8c043c6a32565ecb5a41bde067c3	ELSA-2013-1090	ol5_x86_64_latest
	ruby-rdoc-1.8.5-22.el5_7.1.x86_64.rpm	04625fce243de5e04e0349b3edbaf5c791dbb400583882facdce0ebdb527593b	ELSA-2013-1090	ol5_u7_x86_64_patch
	ruby-rdoc-1.8.5-22.el5_7.1.x86_64.rpm	04625fce243de5e04e0349b3edbaf5c791dbb400583882facdce0ebdb527593b	ELSA-2013-1090	ol5_x86_64_latest
	ruby-ri-1.8.5-22.el5_7.1.x86_64.rpm	8bdc650613115a57e56d2f9a8d26be920c30524fa02a4e07d358833213e8b727	ELSA-2013-1090	ol5_u7_x86_64_patch
	ruby-ri-1.8.5-22.el5_7.1.x86_64.rpm	8bdc650613115a57e56d2f9a8d26be920c30524fa02a4e07d358833213e8b727	ELSA-2013-1090	ol5_x86_64_latest
	ruby-tcltk-1.8.5-22.el5_7.1.x86_64.rpm	5f219bb0085e1926ac8e4f71b981f6d10e2bb96f2711e0a6c16e865f0b6c17cc	ELSA-2013-1090	ol5_u7_x86_64_patch
	ruby-tcltk-1.8.5-22.el5_7.1.x86_64.rpm	5f219bb0085e1926ac8e4f71b981f6d10e2bb96f2711e0a6c16e865f0b6c17cc	ELSA-2013-1090	ol5_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team