Technical Description

Fedora has released updated packages to address a vulnerability identified in Ruby. This flaw could be exploited by attackers to cause a denial of service. For additional information, see : VUPEN/ADV-2006-4855

Affected Products

Fedora Core 6
Fedora Core 5

Solution

Upgrade the affected packages :

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/

7ce81d3d2a19ce1b9c52b51fa04d1e8b1c8f7499 SRPMS/ruby-1.8.5.2-1.fc5.src.rpm
7ce81d3d2a19ce1b9c52b51fa04d1e8b1c8f7499 noarch/ruby-1.8.5.2-1.fc5.src.rpm
fffc6f292c90479b4882d006a1e61d1defe652b7 ppc/ruby-ri-1.8.5.2-1.fc5.ppc.rpm
c218e8195ff354bc48b49b0eecb9dc5180cc8393 ppc/ruby-rdoc-1.8.5.2-1.fc5.ppc.rpm
ec3b39b1f02c7a472f16a5f0b6ea762b6141c95f ppc/ruby-libs-1.8.5.2-1.fc5.ppc.rpm
450fe21a323aca1197e05296753ff1a682232e5c ppc/ruby-irb-1.8.5.2-1.fc5.ppc.rpm
6b7ae8911cd61643cd8b0b0b6a83fe35064daa6f ppc/ruby-1.8.5.2-1.fc5.ppc.rpm
33691cebb4b6adab1339876dcdf1c80d6ba5cc12 ppc/ruby-devel-1.8.5.2-1.fc5.ppc.rpm
b49f473f686431cda259b9ad0fc3112c26faa901 ppc/ruby-mode-1.8.5.2-1.fc5.ppc.rpm
319da4b82d36f2b8001d6637ffb49551295de40a ppc/ruby-tcltk-1.8.5.2-1.fc5.ppc.rpm
fffacda5a7a9c3b7e67da4c5311184ab88d89a09 ppc/debug/ruby-debuginfo-1.8.5.2-1.fc5.ppc.rpm
32d8c171fa5450b13966e2f45046db026868b325 ppc/ruby-docs-1.8.5.2-1.fc5.ppc.rpm
60750e80aeba7c65cc2437ec3197dd72ca456b1c x86_64/ruby-irb-1.8.5.2-1.fc5.x86_64.rpm
f56285ca4e8e23e999d25982dce191ad91647801 x86_64/ruby-devel-1.8.5.2-1.fc5.x86_64.rpm
957b5d7fab1873e0d2aa300ca66a69d35d128eb4 x86_64/ruby-mode-1.8.5.2-1.fc5.x86_64.rpm
8a4991a738c757b60f84d99836eb9544e22fa1d3 x86_64/ruby-rdoc-1.8.5.2-1.fc5.x86_64.rpm
7ee23df67f795c6db0a61944f714140db56e7b44 x86_64/debug/ruby-debuginfo-1.8.5.2-1.fc5.x86_64.rpm
1493c4bc7d6427bc871ec2caebc378cd04943bfd x86_64/ruby-1.8.5.2-1.fc5.x86_64.rpm
fcd748713afb8373778256f94075068a3ffe4d76 x86_64/ruby-ri-1.8.5.2-1.fc5.x86_64.rpm
4d26ca6f7f397593ac9350b4d7491344d4dffc17 x86_64/ruby-tcltk-1.8.5.2-1.fc5.x86_64.rpm
aabc208072b1aacb5b38416512c49f6c541a3c03 x86_64/ruby-libs-1.8.5.2-1.fc5.x86_64.rpm
7ea3434c13b7ccbf46a857950dcf360e271e72f3 x86_64/ruby-docs-1.8.5.2-1.fc5.x86_64.rpm
92713e123e949293e3b21e84d4b89aead6c63f56 i386/debug/ruby-debuginfo-1.8.5.2-1.fc5.i386.rpm
0eba418c244365612c006052aceaae3bbea6e99b i386/ruby-1.8.5.2-1.fc5.i386.rpm
9fde02ec000fea4f1afbe7ed0251692c7fcc0ec2 i386/ruby-rdoc-1.8.5.2-1.fc5.i386.rpm
e9ccf8c7a58f5388be5d85726f718c48d1d0af11 i386/ruby-libs-1.8.5.2-1.fc5.i386.rpm
d4cb1fd7c1a643c7f6fc1c0e5f2ec78f147036c1 i386/ruby-tcltk-1.8.5.2-1.fc5.i386.rpm
90b7a6bd6a6f012b2cff021fea238ba81c8a8209 i386/ruby-mode-1.8.5.2-1.fc5.i386.rpm
df8af0fb438e5155127ce00d8329078108972fc9 i386/ruby-docs-1.8.5.2-1.fc5.i386.rpm
87931e5ecffbc0982fed03e8fbfbeda20505e75e i386/ruby-devel-1.8.5.2-1.fc5.i386.rpm
21f187e12a24f41396c231298b10e79e9b268a87 i386/ruby-ri-1.8.5.2-1.fc5.i386.rpm
e2162b3e13fd4a418bd325f96352f7e13b7bb532 i386/ruby-irb-1.8.5.2-1.fc5.i386.rpm

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/

c77587f12426e96479f7b84f6318a5f0954a079d SRPMS/ruby-1.8.5.2-1.fc6.src.rpm
c77587f12426e96479f7b84f6318a5f0954a079d noarch/ruby-1.8.5.2-1.fc6.src.rpm
44107c17b9dcf01ebe202f2400c8090c68d366b6 ppc/ruby-irb-1.8.5.2-1.fc6.ppc.rpm
e94c7341b9239a812a14a83082c94bc5db050be9 ppc/ruby-libs-1.8.5.2-1.fc6.ppc.rpm
b99c058be5df438ac7591e5e8c132ba73114c833 ppc/ruby-mode-1.8.5.2-1.fc6.ppc.rpm
93a48d179d4f996819d38a809274b3f1bb9cf4a6 ppc/ruby-docs-1.8.5.2-1.fc6.ppc.rpm
438c147a867dd92430d0c63f22cf35a2ffa40316 ppc/ruby-rdoc-1.8.5.2-1.fc6.ppc.rpm
0e0481100d6b17d029d08ff4dd99206eed394f53 ppc/ruby-1.8.5.2-1.fc6.ppc.rpm
40ec9c870f447c3e5e443f62b7802f5c9ee8cc89 ppc/debug/ruby-debuginfo-1.8.5.2-1.fc6.ppc.rpm
5725eaf6206d6446d9a20c279678670642e714fb ppc/ruby-ri-1.8.5.2-1.fc6.ppc.rpm
05849eac8717f0f4ef3da726859bfe19a8df3441 ppc/ruby-devel-1.8.5.2-1.fc6.ppc.rpm
fc0545663dc1e172d188eac10e2c566c7e3adbe9 ppc/ruby-tcltk-1.8.5.2-1.fc6.ppc.rpm
aaca776fdfc86eab7286ce294f3255f2aee96563 x86_64/ruby-1.8.5.2-1.fc6.x86_64.rpm
42fa1c053c641ba448764a6586f332116f620803 x86_64/ruby-devel-1.8.5.2-1.fc6.x86_64.rpm
185682cb04515f7083b9592c64fe9c1bb7b7018f x86_64/ruby-rdoc-1.8.5.2-1.fc6.x86_64.rpm
e212ab96328bdeb8e9f9013901e907121421910d x86_64/ruby-tcltk-1.8.5.2-1.fc6.x86_64.rpm
9398cbefc22c788dcb997c14293d4ce4315b8a86 x86_64/ruby-mode-1.8.5.2-1.fc6.x86_64.rpm
7b88ad7169dead81a9582cbb7042abe975dc6e14 x86_64/ruby-libs-1.8.5.2-1.fc6.x86_64.rpm
dee168bec92728bda77a05a3e2c596b62d4be953 x86_64/ruby-irb-1.8.5.2-1.fc6.x86_64.rpm
2f177caf299a04690106bad5862038fde90bb25b x86_64/debug/ruby-debuginfo-1.8.5.2-1.fc6.x86_64.rpm
ae4cd52f660a9c41422f4cd9a733430269d1f2fc x86_64/ruby-ri-1.8.5.2-1.fc6.x86_64.rpm
5e9274b89dcf2e9f6deee636543795229dc3ca6c x86_64/ruby-docs-1.8.5.2-1.fc6.x86_64.rpm
34722f8548dd2789ae920c458914d5ff5e3e54fb i386/ruby-docs-1.8.5.2-1.fc6.i386.rpm
420c4ebb4e7250930004065d70fd654d3139da15 i386/ruby-ri-1.8.5.2-1.fc6.i386.rpm
1196a6b6a05f79a5140cdb1b4735f6310ae333d6 i386/ruby-irb-1.8.5.2-1.fc6.i386.rpm
13f40460a075c4ec667b1a6f81ceaf7be8a124bf i386/ruby-libs-1.8.5.2-1.fc6.i386.rpm
2611c919470b4011290495e3063c3cdce027c8df i386/ruby-devel-1.8.5.2-1.fc6.i386.rpm
ba26f75055ab1be63484eadb84c6f474601e96a2 i386/debug/ruby-debuginfo-1.8.5.2-1.fc6.i386.rpm
7dd4f8d1c353e668d6faa9c837a30039056a93b2 i386/ruby-tcltk-1.8.5.2-1.fc6.i386.rpm
e2dc4858810fae7e34d5e14f4a46b445a6966c4e i386/ruby-1.8.5.2-1.fc6.i386.rpm
6baf0921764f4987859ad4b29c7f488bfcfe7746 i386/ruby-rdoc-1.8.5.2-1.fc6.i386.rpm
4bc0e24bc051c61082b1cf12f14fabb595c99d2b i386/ruby-mode-1.8.5.2-1.fc6.i386.rpm

References

http://www.vupen.com/english/advisories/2006/4957
https://www.redhat.com/archives/fedora-package-announce/2006-December/msg00065.html
https://www.redhat.com/archives/fedora-package-announce/2006-December/msg00066.html

ChangeLog

2006-12-12 : Initial release

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.