irb, ruby security update

CentOS Errata and Security Advisory CESA-2005:543

Ruby is an interpreted scripting language for object-oriented programming.

A bug was found in the way Ruby launched an XMLRPC server. If an XMLRPC
server is launched in a certain way, it becomes possible for a remote
attacker to execute arbitrary commands within the XMLRPC server. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name
CAN-2005-1992 to this issue.

Users of Ruby should update to these erratum packages, which contain a
backported patch and are not vulnerable to this issue.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2005-August/074170.html
https://lists.centos.org/pipermail/centos-announce/2005-August/074173.html
https://lists.centos.org/pipermail/centos-announce/2005-August/074176.html
https://lists.centos.org/pipermail/centos-announce/2005-August/074177.html

Affected packages:
irb
ruby
ruby-devel
ruby-docs
ruby-libs
ruby-mode
ruby-tcltk

Upstream details at:
https://access.redhat.com/errata/RHSA-2005:543