Nom du paquet
ruby
Date
2006-10-27
Advisory ID
MDKSA-2006:192
Affected versions
CS4.0 x86_64 , 2006.0 i586 , 2007.0 x86_64 , 2007.0 i586 , CS3.0 x86_64 , CS4.0 i586 , CS3.0 i586 , 2006.0 x86_64

Problem description

The CGI library in Ruby 1.8 allowed a remote attacker to cause a Denial
of Service via an HTTP request with a multipart MIME body that
contained an invalid boundary specifier, which would result in an
infinite loop and CPU consumption.

Updated packages have been patched to correct this issue.

Updated packages

CS4.0 x86_64

 05ecad036963dc16c0e5cd0bfb04efed  corporate/4.0/x86_64/ruby-1.8.2-7.4.20060mlcs4.x86_64.rpm
 71dd68f19989395dab35168a1338f25b  corporate/4.0/x86_64/ruby-devel-1.8.2-7.4.20060mlcs4.x86_64.rpm
 7199919374de62c24cb15cf879a88dbe  corporate/4.0/x86_64/ruby-doc-1.8.2-7.4.20060mlcs4.x86_64.rpm
 35f6c32ce1c9d93f36f60dae3a1f41d5  corporate/4.0/x86_64/ruby-tk-1.8.2-7.4.20060mlcs4.x86_64.rpm 
 2a7981a830a7a9384b5ed2a3272d9aaa  corporate/4.0/SRPMS/ruby-1.8.2-7.4.20060mlcs4.src.rpm

2006.0 i586

 f0272f52ef6c1997871a8e6ec02e1bd7  2006.0/i586/ruby-1.8.2-7.4.20060mdk.i586.rpm
 b7726c3839fdd0acc10108de90d188c3  2006.0/i586/ruby-devel-1.8.2-7.4.20060mdk.i586.rpm
 d6eef115bcdc8eb7c35df35e7fc1ca66  2006.0/i586/ruby-doc-1.8.2-7.4.20060mdk.i586.rpm
 8fc499b4fea37a0c3ff31bb2047d639b  2006.0/i586/ruby-tk-1.8.2-7.4.20060mdk.i586.rpm 
 3a57108ef04cb1efab8640dcb0029fb1  2006.0/SRPMS/ruby-1.8.2-7.4.20060mdk.src.rpm

2007.0 x86_64

 b1377e678c818d27fa4f9894da35adb2  2007.0/x86_64/ruby-1.8.5-2.1mdv2007.0.x86_64.rpm
 ef84cbd877282a57b86108acf87e1859  2007.0/x86_64/ruby-devel-1.8.5-2.1mdv2007.0.x86_64.rpm
 828ade30bc1505a455f291efc110078c  2007.0/x86_64/ruby-doc-1.8.5-2.1mdv2007.0.x86_64.rpm
 e5ac4f7397157fc126ae76af869b35e4  2007.0/x86_64/ruby-tk-1.8.5-2.1mdv2007.0.x86_64.rpm 
 31e25bf195003a42cd27ff380c350be9  2007.0/SRPMS/ruby-1.8.5-2.1mdv2007.0.src.rpm

2007.0 i586

 f4c71e44767723c560f68611fd5ed40f  2007.0/i586/ruby-1.8.5-2.1mdv2007.0.i586.rpm
 9774e776877853e9d8dac21a31ab916c  2007.0/i586/ruby-devel-1.8.5-2.1mdv2007.0.i586.rpm
 445edc4e125317acbe21042ba4d81d65  2007.0/i586/ruby-doc-1.8.5-2.1mdv2007.0.i586.rpm
 538123be42ba8395c10fbd3252605e50  2007.0/i586/ruby-tk-1.8.5-2.1mdv2007.0.i586.rpm 
 31e25bf195003a42cd27ff380c350be9  2007.0/SRPMS/ruby-1.8.5-2.1mdv2007.0.src.rpm

CS3.0 x86_64

 5e80b3f821ccbbceaf650469c3a28c2c  corporate/3.0/x86_64/ruby-1.8.1-1.7.C30mdk.x86_64.rpm
 25b68104a5074ae948125ad78dbaaf1a  corporate/3.0/x86_64/ruby-devel-1.8.1-1.7.C30mdk.x86_64.rpm
 9e4938f74c6ea5a7198c281dbbecdf0a  corporate/3.0/x86_64/ruby-doc-1.8.1-1.7.C30mdk.x86_64.rpm
 4f1315fd9c95e5241e3978890a730bbe  corporate/3.0/x86_64/ruby-tk-1.8.1-1.7.C30mdk.x86_64.rpm 
 75afbf41268564d47f5fc9df31f95ab6  corporate/3.0/SRPMS/ruby-1.8.1-1.7.C30mdk.src.rpm

CS4.0 i586

 ba740fba1e7362102a1ce5e19392bbca  corporate/4.0/i586/ruby-1.8.2-7.4.20060mlcs4.i586.rpm
 5e73abcddf887587d1e845be09f95c3e  corporate/4.0/i586/ruby-devel-1.8.2-7.4.20060mlcs4.i586.rpm
 f08a296b52bc64dfe626ca88718c0a8e  corporate/4.0/i586/ruby-doc-1.8.2-7.4.20060mlcs4.i586.rpm
 7faf87d0e62775fe46a3b9f05f677fb4  corporate/4.0/i586/ruby-tk-1.8.2-7.4.20060mlcs4.i586.rpm 
 2a7981a830a7a9384b5ed2a3272d9aaa  corporate/4.0/SRPMS/ruby-1.8.2-7.4.20060mlcs4.src.rpm

CS3.0 i586

 062a53f26ee73b0e570dec87401bd37e  corporate/3.0/i586/ruby-1.8.1-1.7.C30mdk.i586.rpm
 abb7bbb216dd65e14756c3549053b404  corporate/3.0/i586/ruby-devel-1.8.1-1.7.C30mdk.i586.rpm
 87ece8cd4f0ef4309fe8cca98423467a  corporate/3.0/i586/ruby-doc-1.8.1-1.7.C30mdk.i586.rpm
 cfca4b4b06d907d0fae324194a944add  corporate/3.0/i586/ruby-tk-1.8.1-1.7.C30mdk.i586.rpm 
 75afbf41268564d47f5fc9df31f95ab6  corporate/3.0/SRPMS/ruby-1.8.1-1.7.C30mdk.src.rpm

2006.0 x86_64

 cf8394aec203b6cb6bf0de061644887f  2006.0/x86_64/ruby-1.8.2-7.4.20060mdk.x86_64.rpm
 285d54c1972ecd72f79a14608f3fa455  2006.0/x86_64/ruby-devel-1.8.2-7.4.20060mdk.x86_64.rpm
 45f0e3385960d938e9cb13dd0752963e  2006.0/x86_64/ruby-doc-1.8.2-7.4.20060mdk.x86_64.rpm
 685b25cd67aa74286cc96bb69eedae33  2006.0/x86_64/ruby-tk-1.8.2-7.4.20060mdk.x86_64.rpm 
 3a57108ef04cb1efab8640dcb0029fb1  2006.0/SRPMS/ruby-1.8.2-7.4.20060mdk.src.rpm

References