-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-5722 2008-06-26 02:40:11 --------------------------------------------------------------------------------
Name : ruby Product : Fedora 9 Version : 1.8.6.230 Release : 2.fc9 URL : http://www.ruby-lang.org/ Summary : An interpreter of object-oriented scripting language Description : Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks (as in Perl). It is simple, straight-forward, and extensible. -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 25 2008 Akira TAGOH <[EMAIL PROTECTED]> - 1.8.6.230-2 - Fix a segfault issue. (#452809) * Tue Jun 24 2008 Akira TAGOH <[EMAIL PROTECTED]> - 1.8.6.230-1 - New upstream release. - Security fixes. (#452294). - CVE-2008-1891: WEBrick CGI source disclosure. - CVE-2008-2662: Integer overflow in rb_str_buf_append(). - CVE-2008-2663: Integer overflow in rb_ary_store(). - CVE-2008-2664: Unsafe use of alloca in rb_str_format(). - CVE-2008-2725: Integer overflow in rb_ary_splice(). - CVE-2008-2726: Integer overflow in rb_ary_splice(). - ruby-1.8.6.111-CVE-2007-5162.patch: removed. -------------------------------------------------------------------------------- References: [ 1 ] Bug #452809 - ruby: str_buf_cat regression in -p230 https://bugzilla.redhat.com/show_bug.cgi?id=452809 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update ruby' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list Fedora-package-announce@redhat.com http://www.redhat.com/mailman/listinfo/fedora-package-announce