DSA-1651-1 ruby1.8 - several vulnerabilities

Bulletin has no description...

Fedora 9 : ruby-1.8.6.287-2.fc9 (2008-8738)

Update to new upstream release fixing multiple security issues detailed in the upstream advisories: http://www.ruby-lang.org/en/news/2008/08/08/multiple- vulnerabilities-in-ruby/ - CVE-2008-3655 - multiple insufficient safe mode restrictions - CVE-2008-3656 - WEBrick DoS vulnerability CPU...

Fedora 8 : ruby-1.8.6.287-2.fc8 (2008-8736)

Update to new upstream release fixing multiple security issues detailed in the upstream advisories: http://www.ruby-lang.org/en/news/2008/08/08/multiple- vulnerabilities-in-ruby/ - CVE-2008-3655 - multiple insufficient safe mode restrictions - CVE-2008-3656 - WEBrick DoS vulnerability CPU...

CVE-2008-3657

CVE-2008-3657 is a confirmed issue in the Ruby DL module where inputs are not tainted, allowing context-dependent attackers to bypass safe levels and call dangerous functions via DL.dlopen. Affected are Ruby 1.8.5 and older, 1.8.6 up to -p286, 1.8.7 up to -p71, and 1.9 up to r18423. Connected adv...

CVE-2008-3657

creationtimestamp| type| source ---|---|--- 2008-08-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32223...

CVE-2007-3657

CVE-2007-3657 affects Mozilla Firefox 2.0.0.4, where opening multiple tabs in a popup window may cause a denial of service. The connected records consistently describe the DoS symptom but do not provide a concrete root cause, exploit details, affected sub-versions beyond 2.0.0.4, or an available ...

CVE-2006-3657

Microsoft Internet Explorer 6 contains a vulnerability in the DXImageTransform.Microsoft.Gradient ActiveX object. A long StartColorStr or EndColorStr property can trigger a remote denial of service via a stack overflow. Affected: IE6; vulnerability impact is to crash/partial availability. The doc...

CVE-2005-3657

The CVE-2005-3657 issue affects McAfee Security Center’s MCINSCTL.DLL ActiveX control. The McLog object (MCINSTALL.McLog) allows logging, but the control does not restrict which domains may load it because it does not use the IObjectSafetySiteLock API. This enables remote attackers to create or a...