Subject: | |
From: | |
Reply To: | |
Date: | Fri, 5 Dec 2008 13:42:06 -0600 |
Content-Type: | text/plain |
Parts/Attachments: |
|
|
Synopsis: Moderate: ruby security update
Issue date: 2008-12-04
CVE Names: CVE-2008-4310
Vincent Danen reported, that Red Hat Security Advisory RHSA-2008:0897
did not properly address a denial of service flaw in the WEBrick (Ruby
HTTP server toolkit), known as CVE-2008-3656. This flaw allowed a
remote attacker to send a specially-crafted HTTP request to a WEBrick
server that would cause the server to use excessive CPU time. This
update properly addresses this flaw. (CVE-2008-4310)
SL 4.x
SRPMS:
ruby-1.8.1-7.el4_7.2.src.rpm
i386:
irb-1.8.1-7.el4_7.2.i386.rpm
ruby-1.8.1-7.el4_7.2.i386.rpm
ruby-devel-1.8.1-7.el4_7.2.i386.rpm
ruby-docs-1.8.1-7.el4_7.2.i386.rpm
ruby-libs-1.8.1-7.el4_7.2.i386.rpm
ruby-mode-1.8.1-7.el4_7.2.i386.rpm
ruby-tcltk-1.8.1-7.el4_7.2.i386.rpm
x86_64:
irb-1.8.1-7.el4_7.2.x86_64.rpm
ruby-1.8.1-7.el4_7.2.x86_64.rpm
ruby-devel-1.8.1-7.el4_7.2.x86_64.rpm
ruby-docs-1.8.1-7.el4_7.2.x86_64.rpm
ruby-libs-1.8.1-7.el4_7.2.i386.rpm
ruby-libs-1.8.1-7.el4_7.2.x86_64.rpm
ruby-mode-1.8.1-7.el4_7.2.x86_64.rpm
ruby-tcltk-1.8.1-7.el4_7.2.x86_64.rpm
SL 5.x
SRPMS:
ruby-1.8.5-5.el5_2.6.src.rpm
i386:
ruby-1.8.5-5.el5_2.6.i386.rpm
ruby-devel-1.8.5-5.el5_2.6.i386.rpm
ruby-docs-1.8.5-5.el5_2.6.i386.rpm
ruby-irb-1.8.5-5.el5_2.6.i386.rpm
ruby-libs-1.8.5-5.el5_2.6.i386.rpm
ruby-mode-1.8.5-5.el5_2.6.i386.rpm
ruby-rdoc-1.8.5-5.el5_2.6.i386.rpm
ruby-ri-1.8.5-5.el5_2.6.i386.rpm
ruby-tcltk-1.8.5-5.el5_2.6.i386.rpm
x86_64:
ruby-1.8.5-5.el5_2.6.x86_64.rpm
ruby-devel-1.8.5-5.el5_2.6.i386.rpm
ruby-devel-1.8.5-5.el5_2.6.x86_64.rpm
ruby-docs-1.8.5-5.el5_2.6.x86_64.rpm
ruby-irb-1.8.5-5.el5_2.6.x86_64.rpm
ruby-libs-1.8.5-5.el5_2.6.i386.rpm
ruby-libs-1.8.5-5.el5_2.6.x86_64.rpm
ruby-mode-1.8.5-5.el5_2.6.x86_64.rpm
ruby-rdoc-1.8.5-5.el5_2.6.x86_64.rpm
ruby-ri-1.8.5-5.el5_2.6.x86_64.rpm
ruby-tcltk-1.8.5-5.el5_2.6.x86_64.rpm
-Connie Sieh
-Troy Dawson
|
|
|