Red Hat Security AdvisoryRHSA-2012:0070
ruby security update
Released 2012-01-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) ruby-1.8.5-22.el5_7.1, ruby-devel-1.8.5-22.el5_7.1, ruby-devel-1.8.5-22.el5_7.1.i386 +2
- Red Hat Enterprise Linux (v. 5 server) ruby-1.8.5-22.el5_7.1, ruby-1.8.5-22.el5_7.1.i386, ruby-1.8.5-22.el5_7.1.ia64 +33
- Red Hat Enterprise Linux AS version 4 irb-1.8.1-18.el4, irb-1.8.1-18.el4.i386, irb-1.8.1-18.el4.ia64 +25
- Red Hat Enterprise Linux Desktop (v. 5 client) ruby-1.8.5-22.el5_7.1, ruby-1.8.5-22.el5_7.1.i386, ruby-docs-1.8.5-22.el5_7.1 +11
- Red Hat Enterprise Linux Desktop version 4 irb-1.8.1-18.el4, irb-1.8.1-18.el4.i386, ruby-1.8.1-18.el4 +11
- Red Hat Enterprise Linux ES version 4 irb-1.8.1-18.el4, irb-1.8.1-18.el4.i386, irb-1.8.1-18.el4.ia64 +18
- Red Hat Enterprise Linux WS version 4 irb-1.8.1-18.el4, irb-1.8.1-18.el4.i386, irb-1.8.1-18.el4.ia64 +18
Fixes 2 records
Priority MEDIUM 41
Ruby (aka CRuby) before 1.8.7-p357 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.04059 · Published 2011-12-30 · Fixed CWE-20
Priority LOW 27
Ruby before 1.8.6-p114 does not reset the random seed upon forking, which makes it easier for context-dependent attackers to predict the values of random numbers by leveraging knowledge of the number sequence obtained in…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02023 · Published 2011-08-05 · Fixed CWE-310
