ruby-1.8.5-27.AXS3

エラータID: AXSA:2013-43:01

Release date: 
Friday, January 25, 2013 - 14:17
Subject: 
ruby-1.8.5-27.AXS3
Affected Channels: 
Asianux Server 3 for x86_64
Asianux Server 3 for x86
Severity: 
High
Description: 

Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks (as in Perl). It is simple, straight-forward, and extensible.

Security issues fixed with this release:

• CVE-2012-4481
No description available at the time of writing, please refer to the CVE link below.

• CVE-2012-4522
The rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0 before r37163 allows context-dependent attackers to create files in unexpected locations or with unexpected names via a NUL byte in a file path.

Fixed bugs:

• Previously, the "rb_syck_mktime" option could sometimes terminate with a segmentation fault when installing libraries with certain gems; this has been fixed.

Solution: 

Update packages.

CVEs: 
CVE-2012-4481
The safe-level feature in Ruby 1.8.7 allows context-dependent attackers to modify strings via the NameError#to_s method when operating on Ruby objects. NOTE: this issue is due to an incomplete fix for CVE-2011-1005.
CVE-2012-4522
The rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0 before r37163 allows context-dependent attackers to create files in unexpected locations or with unexpected names via a NUL byte in a file path.
Additional Info: 

N/A

Download: 

SRPMS
  1. ruby-1.8.5-27.AXS3.src.rpm
    MD5: 364a391acc9c5c3e94c2afc3de0a6b2c
    SHA-256: b8836f41673ed6fea93f8aa5e8fe2b7b9f0a55479d3e81f97a4b69aea0cf55ec
    Size: 5.37 MB

Asianux Server 3 for x86
  1. ruby-1.8.5-27.AXS3.i386.rpm
    MD5: bb8451b5be82c79c9a9c630427b44fc9
    SHA-256: e148b548893d495581843de89e44f4b59e43f2c561ddfb2efac268b72d9adce9
    Size: 281.83 kB
  2. ruby-devel-1.8.5-27.AXS3.i386.rpm
    MD5: 9fa3ccb637a114417959784ff7288efc
    SHA-256: 55d99d7e02aabca24aa3f6e2f315ffe2fa816a461055c7b9d18d44287d60f8f4
    Size: 552.06 kB
  3. ruby-docs-1.8.5-27.AXS3.i386.rpm
    MD5: c69e21d45eb3a2f0d7125a99798b0f9f
    SHA-256: db3bad9cc2c0f697cb8fc5c8821afa8b68b0c767108c48b3e78e4f950bbaba6e
    Size: 1.45 MB
  4. ruby-irb-1.8.5-27.AXS3.i386.rpm
    MD5: f1de60bf637339d953e6871053b1e396
    SHA-256: 1901905128c66b47ba51fd624c2d40a60ad4a1c01467c8f3342b56a1e48035ac
    Size: 72.32 kB
  5. ruby-libs-1.8.5-27.AXS3.i386.rpm
    MD5: 6aeb5834200846de3aa068fe067c9efe
    SHA-256: aba8c455ba6a030cc676f0d5f1fcd6004c8746b8d1529dac143b64e261de2e96
    Size: 1.62 MB
  6. ruby-mode-1.8.5-27.AXS3.i386.rpm
    MD5: 98bd9ac4ef70304a27b5ef9c9ce06422
    SHA-256: 79bf4f046b8086d56ff706b19aecdcaac31b55a21a29e8c58066fd6da5dc18a1
    Size: 56.89 kB
  7. ruby-tcltk-1.8.5-27.AXS3.i386.rpm
    MD5: bb84550f6fdca7da36744d78d0d09a0d
    SHA-256: f7ac24d5469caf38fea05c82a80fe55e072413938079f8cd483dc4942c21013d
    Size: 1.66 MB

Asianux Server 3 for x86_64
  1. ruby-1.8.5-27.AXS3.x86_64.rpm
    MD5: 3148d5a35e9b7d4780e2055b9860c7d0
    SHA-256: 44dfb87ac44ae7e15d1b5b37786bdb7d9ed6645c3729d03a2462cbb433cb9cd4
    Size: 281.86 kB
  2. ruby-devel-1.8.5-27.AXS3.x86_64.rpm
    MD5: 509cebe9b74c6d1b86bbab2c9db2bdf6
    SHA-256: f52a93e8e15fc929596ed7cbd7d479e3c956cd9d9cdf8dca536334535026d351
    Size: 561.89 kB
  3. ruby-docs-1.8.5-27.AXS3.x86_64.rpm
    MD5: 44b2c8c17cc815b22ff84eb8bc143628
    SHA-256: 568f34b5c99663f387b941b3552460e2d758a77e51cba89c5d4f8746e407ce78
    Size: 1.45 MB
  4. ruby-irb-1.8.5-27.AXS3.x86_64.rpm
    MD5: fa67de89463276e5236f3ccb37c898e3
    SHA-256: fc56c1cd27470a09c7993e77b334e8cbd232c78e52b8dee90f686c6bc1bb7fda
    Size: 72.28 kB
  5. ruby-libs-1.8.5-27.AXS3.x86_64.rpm
    MD5: 3449e2961640abbe6d8f3eb6cc56347f
    SHA-256: dcb0483d089f4dff08f322c66f174cf3567e82190d226531e921c39fa534352a
    Size: 1.64 MB
  6. ruby-mode-1.8.5-27.AXS3.x86_64.rpm
    MD5: 19cfd1c62892e3163bf3e4e282696020
    SHA-256: 5680759b7bea0925b57c766da1ada13a792d59cdd30d07d2ad5e80cc1bc58650
    Size: 56.85 kB
  7. ruby-tcltk-1.8.5-27.AXS3.x86_64.rpm
    MD5: 7d28fc6464a2fb3ac79c6bdb2b9401fd
    SHA-256: 3c2ba939576a30eac8f30255b77829952d6a750e2b0808f35a95571affe4b559
    Size: 1.67 MB