Package name ruby Date April 25th, 2006 Advisory ID MDKSA-2006:079 Affected versions CS3.0, 10.2, 2006.0

Problem Description

A vulnerability in how ruby's HTTP module uses blocking sockets was
reported by Yukihiro Matsumoto. By sending large amounts of data to a
server application using this module, a remote attacker could exploit
it to render the application unusable and not respond to other client
requests.

The updated packages have been patched to fix this problem.

Updated Packages

Corporate Server 3.0

 249f78bda13201aecd66a30379a23209  corporate/3.0/RPMS/ruby-1.8.1-1.5.C30mdk.i586.rpm
 210ae59468330f26d71496c636fc4dcc  corporate/3.0/RPMS/ruby-devel-1.8.1-1.5.C30mdk.i586.rpm
 a69109163c0cd1c22616dce20e4924cf  corporate/3.0/RPMS/ruby-doc-1.8.1-1.5.C30mdk.i586.rpm
 cbfdf5cab0ae9c82731a94ef51f60e41  corporate/3.0/RPMS/ruby-tk-1.8.1-1.5.C30mdk.i586.rpm
 7db43332f4a6cd0d6f530f2e423315ac  corporate/3.0/SRPMS/ruby-1.8.1-1.5.C30mdk.src.rpm

Corporate Server 3.0/X86_64

 3ec5b89b32196866594ac0fbeb852e66  x86_64/corporate/3.0/RPMS/ruby-1.8.1-1.5.C30mdk.x86_64.rpm
 63df0377e01145f410075b7122c1e541  x86_64/corporate/3.0/RPMS/ruby-devel-1.8.1-1.5.C30mdk.x86_64.rpm
 54580e762f81bceb21bc62aa7f4f934b  x86_64/corporate/3.0/RPMS/ruby-doc-1.8.1-1.5.C30mdk.x86_64.rpm
 f8e720ecbeafc2dceb8522272b213e08  x86_64/corporate/3.0/RPMS/ruby-tk-1.8.1-1.5.C30mdk.x86_64.rpm
 7db43332f4a6cd0d6f530f2e423315ac  x86_64/corporate/3.0/SRPMS/ruby-1.8.1-1.5.C30mdk.src.rpm

Mandriva Linux LE2005

 f9745c919a26b88653c1bb8d65b22656  10.2/RPMS/ruby-1.8.2-6.3.102mdk.i586.rpm
 a70aa5e8d43962a8e1432eba455550a1  10.2/RPMS/ruby-devel-1.8.2-6.3.102mdk.i586.rpm
 ef56fa7d95bb07869fd990174fba0a80  10.2/RPMS/ruby-doc-1.8.2-6.3.102mdk.i586.rpm
 46cf35ec68925266be3476e0e2244dba  10.2/RPMS/ruby-tk-1.8.2-6.3.102mdk.i586.rpm
 9a297ac138f1be885dbf9bdb3f963dca  10.2/SRPMS/ruby-1.8.2-6.3.102mdk.src.rpm

Mandriva Linux LE2005/X86_64

 7a961ba32e721306fc18cc84138131fa  x86_64/10.2/RPMS/ruby-1.8.2-6.3.102mdk.x86_64.rpm
 6215d5fe2525ddcaf47b22443be40d29  x86_64/10.2/RPMS/ruby-devel-1.8.2-6.3.102mdk.x86_64.rpm
 6bf001166ce1fe417513be0da4afa983  x86_64/10.2/RPMS/ruby-doc-1.8.2-6.3.102mdk.x86_64.rpm
 dc54e4e1cb352e2a31578b528b0fae24  x86_64/10.2/RPMS/ruby-tk-1.8.2-6.3.102mdk.x86_64.rpm
 9a297ac138f1be885dbf9bdb3f963dca  x86_64/10.2/SRPMS/ruby-1.8.2-6.3.102mdk.src.rpm

Mandriva Linux 2006

 3144dc749cdb9da398064c2cf34103fe  2006.0/RPMS/ruby-1.8.2-7.2.20060mdk.i586.rpm
 1bf85e3cd1456dbda21fd95f1626b28f  2006.0/RPMS/ruby-devel-1.8.2-7.2.20060mdk.i586.rpm
 80000d9bf73c957174c6ce8a7c637147  2006.0/RPMS/ruby-doc-1.8.2-7.2.20060mdk.i586.rpm
 272d3970702ec07e44a0469d1f431380  2006.0/RPMS/ruby-tk-1.8.2-7.2.20060mdk.i586.rpm
 5cd34c71849ac8eebe80c6389178a5a8  2006.0/SRPMS/ruby-1.8.2-7.2.20060mdk.src.rpm

Mandriva Linux 2006/X86_64

 c032856335423079f3a68b7eeaeda281  x86_64/2006.0/RPMS/ruby-1.8.2-7.2.20060mdk.x86_64.rpm
 aa44a1b8179d94c3ef4504d504fdb01b  x86_64/2006.0/RPMS/ruby-devel-1.8.2-7.2.20060mdk.x86_64.rpm
 a409a90806495d8a074fa15d9191d053  x86_64/2006.0/RPMS/ruby-doc-1.8.2-7.2.20060mdk.x86_64.rpm
 4a13e6ade495ac6c2d6068d88674d396  x86_64/2006.0/RPMS/ruby-tk-1.8.2-7.2.20060mdk.x86_64.rpm
 5cd34c71849ac8eebe80c6389178a5a8  x86_64/2006.0/SRPMS/ruby-1.8.2-7.2.20060mdk.src.rpm

References

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1931

Upgrade

To upgrade automatically, use MandrivaUpdate.

Verification

Please verify the update prior to upgrading to ensure the integrity of the downloaded package. You can do this with the command :

		rpm --checksig package.rpm
		

You can get the GPG public key of the Mandriva Security Team to verify the GPG signature of each RPM.

If you use MandrivaUpdate, the verification of md5 checksum and GPG signature is performed automatically for you.