Login
Newsletter
Werbung

Sicherheit: Zwei Probleme in Ruby
Aktuelle Meldungen Distributionen
Name: Zwei Probleme in Ruby
ID: FEDORA-2012-15395
Distribution: Fedora
Plattformen: Fedora 17
Datum: So, 14. Oktober 2012, 10:33
Referenzen: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4464
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4466
Applikationen: Ruby

Originalnachricht

Name        : ruby
Product : Fedora 17
Version : 1.9.3.194
Release : 17.fc17
URL : http://ruby-lang.org/
Summary : An interpreter of object-oriented scripting language
Description :
Ruby is the interpreted scripting language for quick and easy
object-oriented programming. It has many features to process text
files and to do system management tasks (as in Perl). It is simple,
straight-forward, and extensible.

-------------------------------------------------------------------------------
-
Update Information:

Some security flaws were found on ruby currently shipped on Fedora 17 where
malicious user can bypass safe mechanize by raising exception intentionally and make arbitrary strings tainted. This flaw were now registered as CVE-2012-4464 and CVE-2012-4466.

This update rpm will fix this issue.
-------------------------------------------------------------------------------
-
ChangeLog:

* Thu Oct 4 2012 Mamoru Tasaka <mtasaka@fedoraproject.org> -
1.9.3.194-17
- Patch from trunk for CVE-2012-4464, CVE-2012-4466
* Thu Sep 6 2012 Vít Ondruch <vondruch@redhat.com> - 1.9.3.194-16
- Split documentation into -doc subpackage (rhbz#854418).
* Tue Aug 14 2012 Vít Ondruch <vondruch@redhat.com> - 1.9.3.194-15
- Revert the dependency of ruby-libs on rubygems (rhbz#845011, rhbz#847482).
* Wed Aug 1 2012 Vít Ondruch <vondruch@redhat.com> - 1.9.3.194-14
- ruby-libs must require rubygems (rhbz#845011).
* Mon Jun 11 2012 Bohuslav Kabrda <bkabrda@redhat.com> - 1.9.3.194-13
- Make the bigdecimal gem a runtime dependency of Ruby.
* Mon Jun 11 2012 Bohuslav Kabrda <bkabrda@redhat.com> - 1.9.3.194-12
- Make symlinks for bigdecimal and io-console gems to ruby stdlib dirs (RHBZ
829209).
* Tue May 29 2012 Bohuslav Kabrda <bkabrda@redhat.com> - 1.9.3.194-11
- Fix license to contain Public Domain.
- macros.ruby now contains unexpanded macros.
-------------------------------------------------------------------------------
-
References:

[ 1 ] Bug #862907 - CVE-2012-4464 CVE-2012-4466 ruby: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=862907
-------------------------------------------------------------------------------
-

This update can be installed with the "yum" update program. Use
su -c 'yum update ruby' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
-------------------------------------------------------------------------------
-
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung