drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Zwei Probleme in Ruby
Name: |
Zwei Probleme in Ruby |
|
ID: |
FEDORA-2012-15376 |
|
Distribution: |
Fedora |
|
Plattformen: |
Fedora 18 |
|
Datum: |
Di, 9. Oktober 2012, 06:56 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4464
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4466 |
|
Applikationen: |
Ruby |
|
Originalnachricht |
Name : ruby Product : Fedora 18 Version : 1.9.3.194 Release : 18.fc18 URL : http://ruby-lang.org/ Summary : An interpreter of object-oriented scripting language Description : Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks (as in Perl). It is simple, straight-forward, and extensible.
------------------------------------------------------------------------------- - Update Information:
Some security flaws were found on ruby currently shipped on Fedora 18 where malicious user can bypass safe mechanize by raising exception intentionally and make arbitrary strings tainted. This flaw were now registered as CVE-2012-4464 and CVE-2012-4466.
This update rpm will fix this issue. ------------------------------------------------------------------------------- - References:
[ 1 ] Bug #862907 - CVE-2012-4464 CVE-2012-4466 ruby: various flaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=862907 ------------------------------------------------------------------------------- -
This update can be installed with the "yum" update program. Use su -c 'yum update ruby' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys ------------------------------------------------------------------------------- - _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-announce
|
|
|
|