Red Hat Security AdvisoryRHSA-2006:0427
ruby security update
Released 2006-05-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 irb-1.8.1-7.EL4.3, irb-1.8.1-7.EL4.3.i386, irb-1.8.1-7.EL4.3.ia64 +25
- Red Hat Enterprise Linux Desktop version 4 irb-1.8.1-7.EL4.3, irb-1.8.1-7.EL4.3.i386, ruby-1.8.1-7.EL4.3 +11
- Red Hat Enterprise Linux ES version 4 irb-1.8.1-7.EL4.3, irb-1.8.1-7.EL4.3.i386, irb-1.8.1-7.EL4.3.ia64 +18
- Red Hat Enterprise Linux WS version 4 irb-1.8.1-7.EL4.3, irb-1.8.1-7.EL4.3.i386, irb-1.8.1-7.EL4.3.ia64 +18
Fixes 1 record
Priority LOW 36
The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections) via a large amount of data.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.10428 · Published 2006-04-20 · Fixed
