ruby1.8 1.8.5-4ubuntu2.3 source package in Ubuntu
Changelog
ruby1.8 (1.8.5-4ubuntu2.3) feisty-security; urgency=low * SECURITY UPDATE: denial of service via resource exhaustion in the REXML module (LP: #261459) - debian/patches/953_CVE-2008-3790.patch: adjust rexml/document.rb and rexml/entity.rb to use expansion limits - CVE-2008-3790 * SECURITY UPDATE: integer overflow in rb_ary_fill may cause denial of service (LP: #246818) - debian/patches/954_CVE-2008-2376.patch: adjust array.c to properly check argument length - CVE-2008-2376 * SECURITY UPDATE: denial of service via multiple long requests to a Ruby socket - debian/patches/955_CVE-2008-3443.patch: adjust regex.c to not use ruby managed memory and check for allocation failures - CVE-2008-3443 * SECURITY UPDATE: denial of service via crafted HTTP request (LP: #257122) - debian/patches/956_CVE-2008-3656.patch: update webrick/httputils.rb to properly check paths ending with '.' - CVE-2008-3656 * SECURITY UPDATE: predictable transaction id and source port for DNS requests (separate vulnerability from CVE-2008-1447) - debian/patches/957_CVE-2008-3905.patch: adjust resolv.rb to use SecureRandom for transaction id and source port - CVE-2008-3905 * SECURITY UPDATE: safe level bypass via DL.dlopen - debian/patches/958_CVE-2008-3657.patch: adjust rb_str_to_ptr and rb_ary_to_ptr in ext/dl/dl.c and rb_dlsym_call in ext/dl/sym.c to propogate taint and check taintness of DLPtrData - CVE-2008-3657 * SECURITY UPDATE: safe level bypass via multiple vectors - debian/patches/959_CVE-2008-3655.patch: use rb_secure(4) in variable.c and syslog.c, check for secure level 3 or higher in eval.c and make sure PROGRAM_NAME can't be modified - CVE-2008-3655 -- Jamie Strandboge <email address hidden> Thu, 09 Oct 2008 09:28:03 -0500
Upload details
- Uploaded by:
- Jamie Strandboge
- Uploaded to:
- Feisty
- Original maintainer:
- Ubuntu Development Team
- Architectures:
- any
- Section:
- interpreters
- Urgency:
- Low Urgency
See full publishing history Publishing
Series | Published | Component | Section |
---|
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
ruby1.8_1.8.5.orig.tar.gz | 4.2 MiB | e3589b247c7919698d33889b6390ecd80acba0e18293464623867db2d42af4da |
ruby1.8_1.8.5-4ubuntu2.3.diff.gz | 105.9 KiB | 5c935b2f6ffa0c334efa31cc49b83ca15862022445d3f0ee5998bd8efe9db3e1 |
ruby1.8_1.8.5-4ubuntu2.3.dsc | 1.1 KiB | d88416715adcb1c17f6a8d1cb47466d536f582567949c18ac304437782f7cf98 |
Available diffs
Binary packages built by this source
- irb1.8: No summary available for irb1.8 in ubuntu feisty.
No description available for irb1.8 in ubuntu feisty.
- libdbm-ruby1.8: No summary available for libdbm-ruby1.8 in ubuntu feisty.
No description available for libdbm-ruby1.8 in ubuntu feisty.
- libgdbm-ruby1.8: No summary available for libgdbm-ruby1.8 in ubuntu feisty.
No description available for libgdbm-ruby1.8 in ubuntu feisty.
- libopenssl-ruby1.8: No summary available for libopenssl-ruby1.8 in ubuntu feisty.
No description available for libopenssl-ruby1.8 in ubuntu feisty.
- libreadline-ruby1.8: No summary available for libreadline-ruby1.8 in ubuntu feisty.
No description available for libreadline-ruby1.8 in ubuntu feisty.
- libruby1.8: No summary available for libruby1.8 in ubuntu feisty.
No description available for libruby1.8 in ubuntu feisty.
- libruby1.8-dbg: No summary available for libruby1.8-dbg in ubuntu feisty.
No description available for libruby1.8-dbg in ubuntu feisty.
- libtcltk-ruby1.8: No summary available for libtcltk-ruby1.8 in ubuntu feisty.
No description available for libtcltk-ruby1.8 in ubuntu feisty.
- rdoc1.8: No summary available for rdoc1.8 in ubuntu feisty.
No description available for rdoc1.8 in ubuntu feisty.
- ri1.8: No summary available for ri1.8 in ubuntu feisty.
No description available for ri1.8 in ubuntu feisty.
- ruby1.8: No summary available for ruby1.8 in ubuntu feisty.
No description available for ruby1.8 in ubuntu feisty.
- ruby1.8-dev: No summary available for ruby1.8-dev in ubuntu feisty.
No description available for ruby1.8-dev in ubuntu feisty.
- ruby1.8-elisp: No summary available for ruby1.8-elisp in ubuntu feisty.
No description available for ruby1.8-elisp in ubuntu feisty.
- ruby1.8-examples: No summary available for ruby1.8-examples in ubuntu feisty.
No description available for ruby1.8-examples in ubuntu feisty.