-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2011-1913 2011-02-21 06:48:49 --------------------------------------------------------------------------------
Name : ruby Product : Fedora 13 Version : 1.8.6.420 Release : 2.fc13 URL : http://www.ruby-lang.org/ Summary : An interpreter of object-oriented scripting language Description : Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks (as in Perl). It is simple, straight-forward, and extensible. -------------------------------------------------------------------------------- Update Information: Two patches backported from 1.8.7 branch, for * Symlink race condition in FileUtils.remove_entry_secure * bypass of $SAFE mechanism in Exception#to_s -------------------------------------------------------------------------------- ChangeLog: * Mon Feb 21 2011 Mamoru Tasaka <[email protected]> - 1.8.6.420-2 - Backport 2 fixes from 1.8.7p420 - Symlink race condition in FileUtils.remove_entry_secure (bug 678913) - bypass of $SAFE mechanism in Exception#to_s (bug 678920) * Sun Dec 26 2010 Mamoru Tasaka <[email protected]> - 1.8.6.420-1 - Update to 1.8.6 p420 * Mon Aug 23 2010 Mamoru Tasaka <[email protected]> - 1.8.6.399-6 - Apply upstream patch for CVE-2010-0541 (bug 587731) * Wed May 19 2010 Mamoru Tasaka <[email protected]> - 1.8.6.399-5 - Retry for bug 559158, Simplify the OpenSSL::Digest class pull more change commits from ruby_1_8 branch * Mon May 17 2010 Mamoru Tasaka <[email protected]> - 1.8.6.399-4 - Patch36 (ruby-1.8.x-RHASH_SIZE-rb_hash_lookup-def.patch) also backport rb_hash_lookup definition (bug 592936) * Thu May 13 2010 Mamoru Tasaka <[email protected]> - 1.8.6.399-3 - ruby-1.8.x-null-class-must-be-Qnil.patch (bug 530407) - Recreate some patches using upstream svn when available, and add some comments for patches * Tue May 11 2010 Mamoru Tasaka <[email protected]> - 1.8.6.399-2 - tcltk: Give up using potentially unmaintained ruby_1_8_6 branch and instead completely replace with ruby_1_8 branch head (at this time, using rev 27738) (seems to fix 560053, 590503) - Fix Japanese encoding strings under ruby-tcltk/ext/tk/sample/ -------------------------------------------------------------------------------- References: [ 1 ] Bug #678913 - CVE-2011-1004 Ruby: Symlink race condition by removing directory trees in fileutils module https://bugzilla.redhat.com/show_bug.cgi?id=678913 [ 2 ] Bug #678920 - CVE-2011-1005 Ruby: Untrusted codes able to modify arbitrary strings https://bugzilla.redhat.com/show_bug.cgi?id=678920 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update ruby' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list [email protected] https://admin.fedoraproject.org/mailman/listinfo/package-announce
