Fedora

Fedora Core 5 Update: ruby-1.8.5.2-1.fc5

13 december, 2006

---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2006-1440
2006-12-11
---------------------------------------------------------------------

Product     : Fedora Core 5
Name        : ruby
Version     : 1.8.5.2
Release     : 1.fc5
Summary     : An interpreter of object-oriented scripting language
Description :
Ruby is the interpreted scripting language for quick and easy
object-oriented programming.  It has many features to process text
files and to do system management tasks (as in Perl).  It is simple,
straight-forward, and extensible.

---------------------------------------------------------------------

* Mon Dec 11 2006 Akira TAGOH <tagoh@redhat.com> - 1.8.5.2-1
- security fix release. (#218289)
* Fri Oct 27 2006 Akira TAGOH <tagoh@redhat.com> - 1.8.5-1
- security fix release.
- ruby-1.8.5-cgi-CVE-2006-5467.patch: fix a CGI multipart parsing bug that
  causes the denial of service. (#212396)
- backport fixes from devel.
  - fixed rbconfig.rb to refer to DESTDIR for sitearchdir. (#207311)
  - updates to 1.8.5
    - removed the unnecessary patches:
      ruby-1.8.4-no-eaccess.patch, ruby-1.8.4-64bit-pack.patch,
      ruby-1.8.4-fix-insecure-dir-operation.patch,
      ruby-1.8.4-fix-insecure-regexp-modification.patch,
      ruby-1.8.4-fix-alias-safe-level.patch.
    - build with --enable-pthread except on ppc.
  - ruby-1.8.5-hash-memory-leak.patch: backported from CVS to fix a memory leak
    on Hash. [ruby-talk:211233]
  - owns sitearchdir. (#201208)
* Thu Jul 20 2006 Akira TAGOH <tagoh@redhat.com> - 1.8.4-8
- security fixes [CVE-2006-3694]
  - ruby-1.8.4-fix-insecure-dir-operation.patch:
  - ruby-1.8.4-fix-insecure-regexp-modification.patch: fixed the insecure
    operations in the certain safe-level restrictions. (#199538)
  - ruby-1.8.4-fix-alias-safe-level.patch: fixed to not bypass the certain
    safe-level restrictions. (#199543)
* Mon Jun 19 2006 Akira TAGOH <tagoh@redhat.com> - 1.8.4-7.fc5
- fixed the wrong file list again. moved tcltk library into ruby-tcltk.
  (#195872)
* Thu Jun  8 2006 Akira TAGOH <tagoh@redhat.com> - 1.8.4-5.fc5
- ruby-deprecated-search-path.patch: applied to add more search path
  for backward compatibility.
- added byacc to BuildReq.
- exclude ppc64 to make ruby-mode package. right now emacs.ppc64 isn't provided
  and buildsys became much stricter.
* Wed May 17 2006 Akira TAGOH <tagoh@redhat.com> - 1.8.4-4.fc5
- correct sitelibdir. (#184198)
- ruby-rubyprefix.patch: moved all arch-independent modules under /usr/lib/ruby
  and keep arch-dependent modules under /usr/lib64/ruby for 64bit archs.
  so 'rubylibdir', 'sitelibdir' and 'sitedir' in Config::CONFIG points to
  the kind of /usr/lib/ruby now. (#184199)
- ruby-deprecated-search-path.patch: added the deprecated installation paths
  to the search path for the backward compatibility.
- added a Provides: ruby(abi) to ruby-libs.
- ruby-1.8.4-64bit-pack.patch: backport patch from upstream to fix unpack("l")
  not working on 64bit arch and integer overflow on template "w". (#189350)
- updated License tag to be more comfortable, and with a pointer to get more
  details, like Python package does. (#179933)
- clean up.

---------------------------------------------------------------------
This update can be downloaded from:
    http://download.fedora.redhat.com/pub/fedora/linux/core/u.

7ce81d3d2a19ce1b9c52b51fa04d1e8b1c8f7499  SRPMS/ruby-1.8.5.2-1.fc5.src.rpm
7ce81d3d2a19ce1b9c52b51fa04d1e8b1c8f7499  noarch/ruby-1.8.5.2-1.fc5.src.rpm
fffc6f292c90479b4882d006a1e61d1defe652b7  ppc/ruby-ri-1.8.5.2-1.fc5.ppc.rpm
c218e8195ff354bc48b49b0eecb9dc5180cc8393  ppc/ruby-rdoc-1.8.5.2-1.fc5.ppc.rpm
ec3b39b1f02c7a472f16a5f0b6ea762b6141c95f  ppc/ruby-libs-1.8.5.2-1.fc5.ppc.rpm
450fe21a323aca1197e05296753ff1a682232e5c  ppc/ruby-irb-1.8.5.2-1.fc5.ppc.rpm
6b7ae8911cd61643cd8b0b0b6a83fe35064daa6f  ppc/ruby-1.8.5.2-1.fc5.ppc.rpm
33691cebb4b6adab1339876dcdf1c80d6ba5cc12  ppc/ruby-devel-1.8.5.2-1.fc5.ppc.rpm
b49f473f686431cda259b9ad0fc3112c26faa901  ppc/ruby-mode-1.8.5.2-1.fc5.ppc.rpm
319da4b82d36f2b8001d6637ffb49551295de40a  ppc/ruby-tcltk-1.8.5.2-1.fc5.ppc.rpm
fffacda5a7a9c3b7e67da4c5311184ab88d89a09  ppc/debug/ruby-debuginfo-1.8.5.2-1.fc5.ppc.rpm
32d8c171fa5450b13966e2f45046db026868b325  ppc/ruby-docs-1.8.5.2-1.fc5.ppc.rpm
60750e80aeba7c65cc2437ec3197dd72ca456b1c  x86_64/ruby-irb-1.8.5.2-1.fc5.x86_64.rpm
f56285ca4e8e23e999d25982dce191ad91647801  x86_64/ruby-devel-1.8.5.2-1.fc5.x86_64.rpm
957b5d7fab1873e0d2aa300ca66a69d35d128eb4  x86_64/ruby-mode-1.8.5.2-1.fc5.x86_64.rpm
8a4991a738c757b60f84d99836eb9544e22fa1d3  x86_64/ruby-rdoc-1.8.5.2-1.fc5.x86_64.rpm
7ee23df67f795c6db0a61944f714140db56e7b44  x86_64/debug/ruby-debuginfo-1.8.5.2-1.fc5.x86_64.rpm
1493c4bc7d6427bc871ec2caebc378cd04943bfd  x86_64/ruby-1.8.5.2-1.fc5.x86_64.rpm
fcd748713afb8373778256f94075068a3ffe4d76  x86_64/ruby-ri-1.8.5.2-1.fc5.x86_64.rpm
4d26ca6f7f397593ac9350b4d7491344d4dffc17  x86_64/ruby-tcltk-1.8.5.2-1.fc5.x86_64.rpm
aabc208072b1aacb5b38416512c49f6c541a3c03  x86_64/ruby-libs-1.8.5.2-1.fc5.x86_64.rpm
7ea3434c13b7ccbf46a857950dcf360e271e72f3  x86_64/ruby-docs-1.8.5.2-1.fc5.x86_64.rpm
92713e123e949293e3b21e84d4b89aead6c63f56  i386/debug/ruby-debuginfo-1.8.5.2-1.fc5.i386.rpm
0eba418c244365612c006052aceaae3bbea6e99b  i386/ruby-1.8.5.2-1.fc5.i386.rpm
9fde02ec000fea4f1afbe7ed0251692c7fcc0ec2  i386/ruby-rdoc-1.8.5.2-1.fc5.i386.rpm
e9ccf8c7a58f5388be5d85726f718c48d1d0af11  i386/ruby-libs-1.8.5.2-1.fc5.i386.rpm
d4cb1fd7c1a643c7f6fc1c0e5f2ec78f147036c1  i386/ruby-tcltk-1.8.5.2-1.fc5.i386.rpm
90b7a6bd6a6f012b2cff021fea238ba81c8a8209  i386/ruby-mode-1.8.5.2-1.fc5.i386.rpm
df8af0fb438e5155127ce00d8329078108972fc9  i386/ruby-docs-1.8.5.2-1.fc5.i386.rpm
87931e5ecffbc0982fed03e8fbfbeda20505e75e  i386/ruby-devel-1.8.5.2-1.fc5.i386.rpm
21f187e12a24f41396c231298b10e79e9b268a87  i386/ruby-ri-1.8.5.2-1.fc5.i386.rpm
e2162b3e13fd4a418bd325f96352f7e13b7bb532  i386/ruby-irb-1.8.5.2-1.fc5.i386.rpm

This update can be installed with the 'yum' update program.  Use 'yum update
package-name' at the command line.  For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------

CVE-2012-0928

The ATRAC codec in RealNetworks RealPlayer 11.x and 14.x through 14.0.7, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer 12.x before 12.0.0.1703 does not properly decode samples, which allows remote attackers to execute arbitrary code via a crafted AT ...

08 february, 2012

CVE-2012-0927

Unspecified vulnerability in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via vectors involving the coded_frame_size value in a RealAudio audio stream. ...

08 february, 2012

CVE-2012-0926

The RV10 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, does not properly handle height and width values, which allows remote attackers to execute arbitrary code via a crafted RV10 RealVideo vid ...

08 february, 2012

CVE-2012-0925

Unspecified vulnerability in the RV40 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted RV40 RealVideo video stream.

08 february, 2012

CVE-2012-0924

RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via vectors involving a VIDOBJ_START_CODE code in a header within a video stream.

08 february, 2012

CVE-2012-0923

The RV20 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, does not properly handle the frame size array, which allows remote attackers to execute arbitrary code via a crafted RV20 RealVideo video ...

08 february, 2012

CVE-2012-0922

rvrender.dll in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via crafted flags in an RMFF file.

08 february, 2012

CVE-2012-0839

OCaml 3.12.1 and earlier computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that ...

08 february, 2012

CVE-2011-5078

The web administration interface in the server in Sybase M-Business Anywhere 6.7 before ESD# 3 and 7.0 before ESD# 7 does not require admin authentication for unspecified scripts, which allows remote authenticated users to list or delete user accounts, mo ...

08 february, 2012

CVE-2012-1035

AdaCore Ada Web Services (AWS) before 2.10.2 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by s ...

08 february, 2012

MS12-004 midiOutPlayNextPolyEvent Heap Overflow Exploit

Target: Microsoft Windows Media
Impact: Code execution

ActFax Server FTP RETR Remote Buffer Overflow Exploit

Target: ActFax Server 4.27 Build 0223 and previous versions
Impact: Arbitrary commands execution

ActFax Server (LPD/LPR) Remote Buffer Overflow Exploit

Target: ActFax Server 4.27 Build 0223 and previous versions
Impact: Arbitrary commands execution