Lucene search

DebianDEBIAN:DSA-1235-1:6F2EE

HistoryDec 13, 2006 - 12:18 p.m.

[SECURITY] [DSA-1235-1] New ruby1.8 package fix denial of service

2006-12-1312:18:52

lists.debian.org

JSON

Debian Security Advisory DSA-1235-1 [email protected]
http://www.debian.org/security/ Steve Kemp
December 13, 2006

Package : ruby1.8
Vulnerability : Denial of service
Problem type : remote
Debian-specific: no
CVE Id(s) : CVE-2006-5467
Debian Bug : 398457

A denial of service vulnerability has been discovered in the CGI library
included with Ruby, the intepreted scripting langauge for quick and easy
object-orientated programming.

For the stable distribution (sarge), this problem has been fixed in version
1.8.2-7sarge5.

We recommend that you upgrade your ruby1.8 package.

Upgrade instructions

wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
will update the internal database
apt-get upgrade
will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.

Debian 3.1 (stable)

Stable updates are available for alpha, amd64, arm, hppa, i386, ia64, m68k, mips, mipsel, powerpc, s390 and sparc.

Source archives:

http://security.debian.org/pool/updates/main/r/ruby1.8/ruby1.8_1.8.2-7sarge5.dsc
Size/MD5 checksum: 1024 912f2bb9a68ba4c1dcad47ebded0946f
http://security.debian.org/pool/updates/main/r/ruby1.8/ruby1.8_1.8.2.orig.tar.gz
Size/MD5 checksum: 3623780 4bc5254bec262d18cf1ceef03aae8bdf
http://security.debian.org/pool/updates/main/r/ruby1.8/ruby1.8_1.8.2-7sarge5.diff.gz
Size/MD5 checksum: 537107 452d8fc55dd8b09fcce1fa843146316e

Architecture independent packages:

http://security.debian.org/pool/updates/main/r/ruby1.8/rdoc1.8_1.8.2-7sarge5_all.deb
Size/MD5 checksum: 234904 3c678d4f692f0a815f8e123ce1ec5cbc
http://security.debian.org/pool/updates/main/r/ruby1.8/ruby1.8-elisp_1.8.2-7sarge5_all.deb
Size/MD5 checksum: 142342 8aa7ade9e0b3af75caf49850d61188f8
http://security.debian.org/pool/updates/main/r/ruby1.8/irb1.8_1.8.2-7sarge5_all.deb
Size/MD5 checksum: 166572 9d149f07d1d580561c8fd139b2505806
http://security.debian.org/pool/updates/main/r/ruby1.8/ri1.8_1.8.2-7sarge5_all.deb
Size/MD5 checksum: 721046 ca07956a53ad6032c5770d36f6b83be6
http://security.debian.org/pool/updates/main/r/ruby1.8/ruby1.8-examples_1.8.2-7sarge5_all.deb
Size/MD5 checksum: 219032 4a2eec33f380b225db9c3b73d4925872

alpha architecture (DEC Alpha)

amd64 architecture (AMD x86_64 (AMD64))

arm architecture (ARM)

hppa architecture (HP PA RISC)

i386 architecture (Intel ia32)

ia64 architecture (Intel ia64)

m68k architecture (Motorola Mc680x0)

mips architecture (MIPS (Big Endian))

mipsel architecture (MIPS (Little Endian))

powerpc architecture (PowerPC)

s390 architecture (IBM S/390)

sparc architecture (Sun SPARC/UltraSPARC)

These files will probably be moved into the stable distribution on
its next update.

For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
Mailing list: [email protected]
Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>

OSVersionArchitecturePackageVersionFilename
Debian3.1armlibreadline-ruby1.8< 1.8.2-7sarge5libreadline-ruby1.8_1.8.2-7sarge5_arm.deb
Debian3.1allri1.8< 1.8.2-7sarge5ri1.8_1.8.2-7sarge5_all.deb
Debian3.1powerpclibreadline-ruby1.8< 1.8.2-7sarge5libreadline-ruby1.8_1.8.2-7sarge5_powerpc.deb
Debian3.1s390libreadline-ruby1.8< 1.8.2-7sarge5libreadline-ruby1.8_1.8.2-7sarge5_s390.deb
Debian3.1mipslibreadline-ruby1.8< 1.8.2-7sarge5libreadline-ruby1.8_1.8.2-7sarge5_mips.deb
Debian3.1m68klibgdbm-ruby1.8< 1.8.2-7sarge5libgdbm-ruby1.8_1.8.2-7sarge5_m68k.deb
Debian3.1mipselruby1.8-dev< 1.8.2-7sarge5ruby1.8-dev_1.8.2-7sarge5_mipsel.deb
Debian3.1mipslibdbm-ruby1.8< 1.8.2-7sarge5libdbm-ruby1.8_1.8.2-7sarge5_mips.deb
Debian3.1allruby1.8-examples< 1.8.2-7sarge5ruby1.8-examples_1.8.2-7sarge5_all.deb
Debian3.1hpparuby1.8< 1.8.2-7sarge5ruby1.8_1.8.2-7sarge5_hppa.deb

OS	Version	Architecture	Package	Version	Filename
Debian	3.1	arm	libreadline-ruby1.8	< 1.8.2-7sarge5	libreadline-ruby1.8_1.8.2-7sarge5_arm.deb
Debian	3.1	all	ri1.8	< 1.8.2-7sarge5	ri1.8_1.8.2-7sarge5_all.deb
Debian	3.1	powerpc	libreadline-ruby1.8	< 1.8.2-7sarge5	libreadline-ruby1.8_1.8.2-7sarge5_powerpc.deb
Debian	3.1	s390	libreadline-ruby1.8	< 1.8.2-7sarge5	libreadline-ruby1.8_1.8.2-7sarge5_s390.deb
Debian	3.1	mips	libreadline-ruby1.8	< 1.8.2-7sarge5	libreadline-ruby1.8_1.8.2-7sarge5_mips.deb
Debian	3.1	m68k	libgdbm-ruby1.8	< 1.8.2-7sarge5	libgdbm-ruby1.8_1.8.2-7sarge5_m68k.deb
Debian	3.1	mipsel	ruby1.8-dev	< 1.8.2-7sarge5	ruby1.8-dev_1.8.2-7sarge5_mipsel.deb
Debian	3.1	mips	libdbm-ruby1.8	< 1.8.2-7sarge5	libdbm-ruby1.8_1.8.2-7sarge5_mips.deb
Debian	3.1	all	ruby1.8-examples	< 1.8.2-7sarge5	ruby1.8-examples_1.8.2-7sarge5_all.deb
Debian	3.1	hppa	ruby1.8	< 1.8.2-7sarge5	ruby1.8_1.8.2-7sarge5_hppa.deb

Rows per page:

1-10 of 1141

JSON

Related for DEBIAN:DSA-1235-1:6F2EE