Bug 229053

Summary:	Gentoo Ruby Security Bug, Where is the Gentoo-Ruby Version 1.8.6-p230
Product:	Gentoo Linux	Reporter:	Zeno Davatz <zdavatz>
Component:	New packages	Assignee:	Gentoo Linux bug wranglers <bug-wranglers>
Status:	RESOLVED DUPLICATE
Severity:	normal
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Zeno Davatz 2008-06-23 14:20:44 UTC

Hi

I just tripped over this one:
http://www.matasano.com/log/1070/updates-on-drew-yaos-terrible-ruby-vulnerabilities/

And found that Gentoo latest Ruby-Version for 1.8.6 is p-114. 

But what we need it p-230 or later. See:
http://www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities/

Feedback is highly appreciated!

Best
Zeno

Reproducible: Always

Comment 1 Jeroen Roovers (RETIRED) gentoo-dev

2008-06-23 14:25:40 UTC


*** This bug has been marked as a duplicate of bug 225465 ***