Red Hat Security AdvisoryRHSA-2011:1581
ruby security, bug fix, and enhancement update
Released 2011-12-05 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) ruby-1.8.7.352-3.el6, ruby-irb-1.8.7.352-3.el6, ruby-libs-1.8.7.352-3.el6
- Red Hat Enterprise Linux Desktop Optional (v. 6) ruby-1.8.7.352-3.el6, ruby-devel-1.8.7.352-3.el6, ruby-docs-1.8.7.352-3.el6 +4
- Red Hat Enterprise Linux HPC Node (v. 6) ruby-1.8.7.352-3.el6, ruby-irb-1.8.7.352-3.el6, ruby-libs-1.8.7.352-3.el6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) ruby-1.8.7.352-3.el6, ruby-devel-1.8.7.352-3.el6, ruby-docs-1.8.7.352-3.el6 +4
- Red Hat Enterprise Linux Server (v. 6) ruby-1.8.7.352-3.el6, ruby-irb-1.8.7.352-3.el6, ruby-libs-1.8.7.352-3.el6 +1
- Red Hat Enterprise Linux Server Optional (v. 6) ruby-1.8.7.352-3.el6, ruby-devel-1.8.7.352-3.el6, ruby-devel-1.8.7.352-3.el6.ppc +5
- Red Hat Enterprise Linux Workstation (v. 6) ruby-1.8.7.352-3.el6, ruby-irb-1.8.7.352-3.el6, ruby-libs-1.8.7.352-3.el6
- Red Hat Enterprise Linux Workstation Optional (v. 6) ruby-1.8.7.352-3.el6, ruby-devel-1.8.7.352-3.el6, ruby-docs-1.8.7.352-3.el6 +4
Fixes 2 records
Priority LOW 27
Ruby before 1.8.6-p114 does not reset the random seed upon forking, which makes it easier for context-dependent attackers to predict the values of random numbers by leveraging knowledge of the number sequence obtained in…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02023 · Published 2011-08-05 · Fixed CWE-310
Priority LOW 27
The SecureRandom.random_bytes function in lib/securerandom.rb in Ruby before 1.8.7-p352 and 1.9.x before 1.9.2-p290 relies on PID values for initialization, which makes it easier for context-dependent attackers to predic…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02248 · Published 2011-08-05 · Partial fix CWE-20
