[ MDKSA-2006:225 ] - Updated ruby packages fix DoS vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:225 http://www.mandriva.com/security/ Package : ruby Date : December 6, 2006 Affected: 2006.0, 2007.0, Corporate 3.0, Corporate 4.0 Problem Description: Another vulnerability has been discovered in the CGI...

CVE-2006-6303

CVE-2006-6303 affects Ruby’s CGI module (read_multipart) where boundaries in MIME multipart content aren’t detected correctly, allowing remote attackers to trigger an infinite loop and cause a denial of service. The issue is in Ruby before 1.8.5-p2; Oracle Linux/RH advisories backported fixes and...