Oval Definition:oval:com.redhat.rhsa:def:20050799
Revision Date:2005-10-25Version:503
Title:RHSA-2005:799: ruby security update (Moderate)
Description:Ruby is an interpreted scripting language for object-oriented programming.

A bug was found in the way ruby handles eval statements. It is possible for a malicious script to call eval in such a way that can allow the bypass of certain safe-level restrictions. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2005-2337 to this issue.

Users of Ruby should update to these erratum packages, which contain a backported patch and are not vulnerable to this issue.
Family:unixClass:patch
Status:Reference(s):CVE-2005-2337
RHSA-2005:799-02
Platform(s):Red Hat Enterprise Linux 3
Red Hat Enterprise Linux 4
Product(s):
Definition Synopsis
  • Release Information
  • Red Hat Enterprise Linux 3 is installed
  • AND
  • ruby-docs is earlier than 0:1.6.8-9.EL3.4
  • AND ruby-docs is signed with Red Hat master key
  • irb is earlier than 0:1.6.8-9.EL3.4
  • AND irb is signed with Red Hat master key
  • ruby-mode is earlier than 0:1.6.8-9.EL3.4
  • AND ruby-mode is signed with Red Hat master key
  • ruby-tcltk is earlier than 0:1.6.8-9.EL3.4
  • AND ruby-tcltk is signed with Red Hat master key
  • ruby-libs is earlier than 0:1.6.8-9.EL3.4
  • AND ruby-libs is signed with Red Hat master key
  • ruby is earlier than 0:1.6.8-9.EL3.4
  • AND ruby is signed with Red Hat master key
  • ruby-devel is earlier than 0:1.6.8-9.EL3.4
  • AND ruby-devel is signed with Red Hat master key
  • OR Package Information
  • Red Hat Enterprise Linux 4 is installed
  • AND
  • ruby-docs is earlier than 0:1.8.1-7.EL4.2
  • AND ruby-docs is signed with Red Hat master key
  • irb is earlier than 0:1.8.1-7.EL4.2
  • AND irb is signed with Red Hat master key
  • ruby-mode is earlier than 0:1.8.1-7.EL4.2
  • AND ruby-mode is signed with Red Hat master key
  • ruby-tcltk is earlier than 0:1.8.1-7.EL4.2
  • AND ruby-tcltk is signed with Red Hat master key
  • ruby-libs is earlier than 0:1.8.1-7.EL4.2
  • AND ruby-libs is signed with Red Hat master key
  • ruby is earlier than 0:1.8.1-7.EL4.2
  • AND ruby is signed with Red Hat master key
  • ruby-devel is earlier than 0:1.8.1-7.EL4.2
  • AND ruby-devel is signed with Red Hat master key
  • BACK