Oval Definition:	oval:com.redhat.rhsa:def:20080981
Revision Date: 2008-12-04 Version: 644 Title: RHSA-2008:0981: ruby security update (Moderate) Description: Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to do system management tasks. Vincent Danen reported, that Red Hat Security Advisory RHSA-2008:0897 did not properly address a denial of service flaw in the WEBrick (Ruby HTTP server toolkit), known as CVE-2008-3656. This flaw allowed a remote attacker to send a specially-crafted HTTP request to a WEBrick server that would cause the server to use excessive CPU time. This update properly addresses this flaw. (CVE-2008-4310) All Ruby users should upgrade to these updated packages, which contain a correct patch that resolves this issue. Family: unix Class: patch Status: Reference(s): CVE-2008-4310 RHSA-2008:0981 RHSA-2008:0981-04 RHSA-2008:0981-04 Platform(s): Red Hat Enterprise Linux 4 Red Hat Enterprise Linux 5 Product(s): Definition Synopsis Red Hat Enterprise Linux must be installed OR Package Information Red Hat Enterprise Linux 4 is installed AND irb is earlier than 0:1.8.1-7.el4_7.2 AND irb is signed with Red Hat redhatrelease2 key ruby is earlier than 0:1.8.1-7.el4_7.2 AND ruby is signed with Red Hat redhatrelease2 key ruby-devel is earlier than 0:1.8.1-7.el4_7.2 AND ruby-devel is signed with Red Hat redhatrelease2 key ruby-docs is earlier than 0:1.8.1-7.el4_7.2 AND ruby-docs is signed with Red Hat redhatrelease2 key ruby-libs is earlier than 0:1.8.1-7.el4_7.2 AND ruby-libs is signed with Red Hat redhatrelease2 key ruby-mode is earlier than 0:1.8.1-7.el4_7.2 AND ruby-mode is signed with Red Hat redhatrelease2 key ruby-tcltk is earlier than 0:1.8.1-7.el4_7.2 AND ruby-tcltk is signed with Red Hat redhatrelease2 key OR Package Information Red Hat Enterprise Linux 5 is installed AND ruby is earlier than 0:1.8.5-5.el5_2.6 AND ruby is signed with Red Hat redhatrelease2 key ruby-devel is earlier than 0:1.8.5-5.el5_2.6 AND ruby-devel is signed with Red Hat redhatrelease2 key ruby-docs is earlier than 0:1.8.5-5.el5_2.6 AND ruby-docs is signed with Red Hat redhatrelease2 key ruby-irb is earlier than 0:1.8.5-5.el5_2.6 AND ruby-irb is signed with Red Hat redhatrelease2 key ruby-libs is earlier than 0:1.8.5-5.el5_2.6 AND ruby-libs is signed with Red Hat redhatrelease2 key ruby-mode is earlier than 0:1.8.5-5.el5_2.6 AND ruby-mode is signed with Red Hat redhatrelease2 key ruby-rdoc is earlier than 0:1.8.5-5.el5_2.6 AND ruby-rdoc is signed with Red Hat redhatrelease2 key ruby-ri is earlier than 0:1.8.5-5.el5_2.6 AND ruby-ri is signed with Red Hat redhatrelease2 key ruby-tcltk is earlier than 0:1.8.5-5.el5_2.6 AND ruby-tcltk is signed with Red Hat redhatrelease2 key
BACK