ELSA-2013-0129

ELSA-2013-0129 - ruby security and bug fix update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2013-01-11

Description

[1.8.5-27]
- unintentional file creation caused by inserting an illegal NUL character
* ruby-1.8.6-CVE-2012-4522-io.c-pipe_open-command-name-should-not-contain-null-.patch
- Related: rhbz#867750

[1.8.5-26]
- escaping vulnerability about Exception#to_s / NameError#to_s
* ruby-1.8.7-p371-CVE-2012-4481.patch
- Resolves: rhbz#867750
- unintentional file creation caused by inserting an illegal NUL character
* ruby-1.8.6-CVE-2012-4522-io.c-rb_open_file-should-check-NUL-in-path.patch
- Resolves: rhbz#867750

[1.8.5-25]
- Resolve buffer overflow causing gem installation issues.
* ruby-1.8.7-syck-avoid-buffer-overflow.patch
- Resolves: rhbz#834381

Related CVEs

CVE-2012-4522

CVE-2012-4481

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 5 (i386)	ruby-1.8.5-27.el5.src.rpm	9c78f9177a4613f1f0e5332516a30afba9be6b17b03e8f0e46c0884f8057dc1b	ELSA-2013-1090	ol5_i386_latest
	ruby-1.8.5-27.el5.src.rpm	9c78f9177a4613f1f0e5332516a30afba9be6b17b03e8f0e46c0884f8057dc1b	ELSA-2013-1090	ol5_u9_i386_base
	ruby-1.8.5-27.el5.i386.rpm	e410cdbe2893f23e137a49ed6af031d4158d80f19dd5f1659fc7fe02a065a54b	ELSA-2013-1090	ol5_i386_latest
	ruby-1.8.5-27.el5.i386.rpm	e410cdbe2893f23e137a49ed6af031d4158d80f19dd5f1659fc7fe02a065a54b	ELSA-2013-1090	ol5_u9_i386_base
	ruby-devel-1.8.5-27.el5.i386.rpm	a6d1ca9b4bdcd6ab8074b77e13d6665cadf4802d4ba173e8e4ec40fd6c3d7402	ELSA-2013-1090	ol5_i386_latest
	ruby-devel-1.8.5-27.el5.i386.rpm	a6d1ca9b4bdcd6ab8074b77e13d6665cadf4802d4ba173e8e4ec40fd6c3d7402	ELSA-2013-1090	ol5_u9_i386_base
	ruby-docs-1.8.5-27.el5.i386.rpm	fd69046f41056b4609101b99e6ead649fe05a33c6a05a000d181914b3bc0fbbf	ELSA-2013-1090	ol5_i386_latest
	ruby-docs-1.8.5-27.el5.i386.rpm	fd69046f41056b4609101b99e6ead649fe05a33c6a05a000d181914b3bc0fbbf	ELSA-2013-1090	ol5_u9_i386_base
	ruby-irb-1.8.5-27.el5.i386.rpm	4fad895088b9750365b00533e04461910344d00cd68a3a007ac860b2fd3bd67c	ELSA-2013-1090	ol5_i386_latest
	ruby-irb-1.8.5-27.el5.i386.rpm	4fad895088b9750365b00533e04461910344d00cd68a3a007ac860b2fd3bd67c	ELSA-2013-1090	ol5_u9_i386_base
	ruby-libs-1.8.5-27.el5.i386.rpm	84ad4149a8b4e4c90984731c5f9ace6af3f546104d137a4809457d4afe441db0	ELSA-2013-1090	ol5_i386_latest
	ruby-libs-1.8.5-27.el5.i386.rpm	84ad4149a8b4e4c90984731c5f9ace6af3f546104d137a4809457d4afe441db0	ELSA-2013-1090	ol5_u9_i386_base
	ruby-mode-1.8.5-27.el5.i386.rpm	7cc5c6ce447c155d74cc9d0eb59e4234363220b3b0e08c3ba58b5db0949cfc67	ELSA-2013-1090	ol5_i386_latest
	ruby-mode-1.8.5-27.el5.i386.rpm	7cc5c6ce447c155d74cc9d0eb59e4234363220b3b0e08c3ba58b5db0949cfc67	ELSA-2013-1090	ol5_u9_i386_base
	ruby-rdoc-1.8.5-27.el5.i386.rpm	26e245e6669a3eb34353695d163263a6087970b16d2489c4e02236a21a7b7a98	ELSA-2013-1090	ol5_i386_latest
	ruby-rdoc-1.8.5-27.el5.i386.rpm	26e245e6669a3eb34353695d163263a6087970b16d2489c4e02236a21a7b7a98	ELSA-2013-1090	ol5_u9_i386_base
	ruby-ri-1.8.5-27.el5.i386.rpm	d708bcdb417b2e7541bb48d139fa2f297ec94abd6761dfd927917549a40d8725	ELSA-2013-1090	ol5_i386_latest
	ruby-ri-1.8.5-27.el5.i386.rpm	d708bcdb417b2e7541bb48d139fa2f297ec94abd6761dfd927917549a40d8725	ELSA-2013-1090	ol5_u9_i386_base
	ruby-tcltk-1.8.5-27.el5.i386.rpm	a3cc9c69aaa50335b3e431e4af4286169a8f6929acd9ffd6899efe30157a9efb	ELSA-2013-1090	ol5_i386_latest
	ruby-tcltk-1.8.5-27.el5.i386.rpm	a3cc9c69aaa50335b3e431e4af4286169a8f6929acd9ffd6899efe30157a9efb	ELSA-2013-1090	ol5_u9_i386_base
Oracle Linux 5 (ia64)	ruby-1.8.5-27.el5.src.rpm	9c78f9177a4613f1f0e5332516a30afba9be6b17b03e8f0e46c0884f8057dc1b	ELSA-2013-1090	ol5_ia64_latest
	ruby-1.8.5-27.el5.src.rpm	9c78f9177a4613f1f0e5332516a30afba9be6b17b03e8f0e46c0884f8057dc1b	ELSA-2013-1090	ol5_u9_ia64_base
	ruby-1.8.5-27.el5.ia64.rpm	d79e4b3ce63de90ab035faf37eceab9d33ad2824372abdc489f262a2e881c891	ELSA-2013-1090	ol5_ia64_latest
	ruby-1.8.5-27.el5.ia64.rpm	d79e4b3ce63de90ab035faf37eceab9d33ad2824372abdc489f262a2e881c891	ELSA-2013-1090	ol5_u9_ia64_base
	ruby-devel-1.8.5-27.el5.ia64.rpm	974d72a7d6c3cb0a8ac1e4d9a1f4421175c243fb8e32b39b86825757e68014e6	ELSA-2013-1090	ol5_ia64_latest
	ruby-devel-1.8.5-27.el5.ia64.rpm	974d72a7d6c3cb0a8ac1e4d9a1f4421175c243fb8e32b39b86825757e68014e6	ELSA-2013-1090	ol5_u9_ia64_base
	ruby-docs-1.8.5-27.el5.ia64.rpm	b6a9d5811436a1ec42df9390f4e3d584519129e84d293dd8c1339e070c45331b	ELSA-2013-1090	ol5_ia64_latest
	ruby-docs-1.8.5-27.el5.ia64.rpm	b6a9d5811436a1ec42df9390f4e3d584519129e84d293dd8c1339e070c45331b	ELSA-2013-1090	ol5_u9_ia64_base
	ruby-irb-1.8.5-27.el5.ia64.rpm	012ac59b0a2fb108e584f830acd7d320b5c775756abac30b5876fb8073237982	ELSA-2013-1090	ol5_ia64_latest
	ruby-irb-1.8.5-27.el5.ia64.rpm	012ac59b0a2fb108e584f830acd7d320b5c775756abac30b5876fb8073237982	ELSA-2013-1090	ol5_u9_ia64_base
	ruby-libs-1.8.5-27.el5.ia64.rpm	b6a83887512d1ea5714bdc2b0c4433aad89b793590f370742471480d60c586ef	ELSA-2013-1090	ol5_ia64_latest
	ruby-libs-1.8.5-27.el5.ia64.rpm	b6a83887512d1ea5714bdc2b0c4433aad89b793590f370742471480d60c586ef	ELSA-2013-1090	ol5_u9_ia64_base
	ruby-mode-1.8.5-27.el5.ia64.rpm	2e84622088c772a3811bbe89a648292973f72966840c727e446c7bfe1e9380b4	ELSA-2013-1090	ol5_ia64_latest
	ruby-mode-1.8.5-27.el5.ia64.rpm	2e84622088c772a3811bbe89a648292973f72966840c727e446c7bfe1e9380b4	ELSA-2013-1090	ol5_u9_ia64_base
	ruby-rdoc-1.8.5-27.el5.ia64.rpm	91611fd25eb9c3bcaa6347fdc3ef9762ba437e148386ceec7a12a122a73cc440	ELSA-2013-1090	ol5_ia64_latest
	ruby-rdoc-1.8.5-27.el5.ia64.rpm	91611fd25eb9c3bcaa6347fdc3ef9762ba437e148386ceec7a12a122a73cc440	ELSA-2013-1090	ol5_u9_ia64_base
	ruby-ri-1.8.5-27.el5.ia64.rpm	7d9697a8493089ec7d1570962401043d838a3ecde780947b027d5eda268ec80f	ELSA-2013-1090	ol5_ia64_latest
	ruby-ri-1.8.5-27.el5.ia64.rpm	7d9697a8493089ec7d1570962401043d838a3ecde780947b027d5eda268ec80f	ELSA-2013-1090	ol5_u9_ia64_base
	ruby-tcltk-1.8.5-27.el5.ia64.rpm	ac798252796bd2858bb7473a5d82372fcc3b4ac2bab9f70249a2b8878fdd0258	ELSA-2013-1090	ol5_ia64_latest
	ruby-tcltk-1.8.5-27.el5.ia64.rpm	ac798252796bd2858bb7473a5d82372fcc3b4ac2bab9f70249a2b8878fdd0258	ELSA-2013-1090	ol5_u9_ia64_base
Oracle Linux 5 (x86_64)	ruby-1.8.5-27.el5.src.rpm	9c78f9177a4613f1f0e5332516a30afba9be6b17b03e8f0e46c0884f8057dc1b	ELSA-2013-1090	ol5_u9_x86_64_base
	ruby-1.8.5-27.el5.src.rpm	9c78f9177a4613f1f0e5332516a30afba9be6b17b03e8f0e46c0884f8057dc1b	ELSA-2013-1090	ol5_x86_64_latest
	ruby-1.8.5-27.el5.x86_64.rpm	9c3b5f8e5d59c419a14500a1f624072e05bfd71f80fa7d6cb1472c8753701f9c	ELSA-2013-1090	ol5_u9_x86_64_base
	ruby-1.8.5-27.el5.x86_64.rpm	9c3b5f8e5d59c419a14500a1f624072e05bfd71f80fa7d6cb1472c8753701f9c	ELSA-2013-1090	ol5_x86_64_latest
	ruby-devel-1.8.5-27.el5.i386.rpm	a6d1ca9b4bdcd6ab8074b77e13d6665cadf4802d4ba173e8e4ec40fd6c3d7402	ELSA-2013-1090	ol5_u9_x86_64_base
	ruby-devel-1.8.5-27.el5.i386.rpm	a6d1ca9b4bdcd6ab8074b77e13d6665cadf4802d4ba173e8e4ec40fd6c3d7402	ELSA-2013-1090	ol5_x86_64_latest
	ruby-devel-1.8.5-27.el5.x86_64.rpm	c1ba097cd23f7b5b6d995a5493d06c7887c19813b5821dc1adb6d455806c6ca6	ELSA-2013-1090	ol5_u9_x86_64_base
	ruby-devel-1.8.5-27.el5.x86_64.rpm	c1ba097cd23f7b5b6d995a5493d06c7887c19813b5821dc1adb6d455806c6ca6	ELSA-2013-1090	ol5_x86_64_latest
	ruby-docs-1.8.5-27.el5.x86_64.rpm	c5301873d8535e36d7ebc07632a4feb1f668491a9c87dacc3e5ff1a58e26f891	ELSA-2013-1090	ol5_u9_x86_64_base
	ruby-docs-1.8.5-27.el5.x86_64.rpm	c5301873d8535e36d7ebc07632a4feb1f668491a9c87dacc3e5ff1a58e26f891	ELSA-2013-1090	ol5_x86_64_latest
	ruby-irb-1.8.5-27.el5.x86_64.rpm	9855233979e60eaf380b4da9fae0f0dedd08eaacc31b1f83b28a47758514bc56	ELSA-2013-1090	ol5_u9_x86_64_base
	ruby-irb-1.8.5-27.el5.x86_64.rpm	9855233979e60eaf380b4da9fae0f0dedd08eaacc31b1f83b28a47758514bc56	ELSA-2013-1090	ol5_x86_64_latest
	ruby-libs-1.8.5-27.el5.i386.rpm	84ad4149a8b4e4c90984731c5f9ace6af3f546104d137a4809457d4afe441db0	ELSA-2013-1090	ol5_u9_x86_64_base
	ruby-libs-1.8.5-27.el5.i386.rpm	84ad4149a8b4e4c90984731c5f9ace6af3f546104d137a4809457d4afe441db0	ELSA-2013-1090	ol5_x86_64_latest
	ruby-libs-1.8.5-27.el5.x86_64.rpm	2cef6932fe60fd11807056361bebfda0a3078d2b8a8b6dbca91168e8d3027664	ELSA-2013-1090	ol5_u9_x86_64_base
	ruby-libs-1.8.5-27.el5.x86_64.rpm	2cef6932fe60fd11807056361bebfda0a3078d2b8a8b6dbca91168e8d3027664	ELSA-2013-1090	ol5_x86_64_latest
	ruby-mode-1.8.5-27.el5.x86_64.rpm	0e896a59357983044fcfe0dae8f260d7b0a5d57127fc6db28717c5043abca09d	ELSA-2013-1090	ol5_u9_x86_64_base
	ruby-mode-1.8.5-27.el5.x86_64.rpm	0e896a59357983044fcfe0dae8f260d7b0a5d57127fc6db28717c5043abca09d	ELSA-2013-1090	ol5_x86_64_latest
	ruby-rdoc-1.8.5-27.el5.x86_64.rpm	ceca23b919e82052a6d8d7bd9cea842da1248a8812c4bcec0d7792db8bf9edc4	ELSA-2013-1090	ol5_u9_x86_64_base
	ruby-rdoc-1.8.5-27.el5.x86_64.rpm	ceca23b919e82052a6d8d7bd9cea842da1248a8812c4bcec0d7792db8bf9edc4	ELSA-2013-1090	ol5_x86_64_latest
	ruby-ri-1.8.5-27.el5.x86_64.rpm	55ac4f8384639338f14b669ce34d269de231e2e3a594ee59f5ce4ee868884da6	ELSA-2013-1090	ol5_u9_x86_64_base
	ruby-ri-1.8.5-27.el5.x86_64.rpm	55ac4f8384639338f14b669ce34d269de231e2e3a594ee59f5ce4ee868884da6	ELSA-2013-1090	ol5_x86_64_latest
	ruby-tcltk-1.8.5-27.el5.x86_64.rpm	063c2b7c7cd06be544b076562a2f804cdbed12c0b2e46ed874abf4fd9b070a2a	ELSA-2013-1090	ol5_u9_x86_64_base
	ruby-tcltk-1.8.5-27.el5.x86_64.rpm	063c2b7c7cd06be544b076562a2f804cdbed12c0b2e46ed874abf4fd9b070a2a	ELSA-2013-1090	ol5_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team