Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 229053 - Gentoo Ruby Security Bug, Where is the Gentoo-Ruby Version 1.8.6-p230
Summary: Gentoo Ruby Security Bug, Where is the Gentoo-Ruby Version 1.8.6-p230
Status: RESOLVED DUPLICATE of bug 225465
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Gentoo Linux bug wranglers
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2008-06-23 14:20 UTC by Zeno Davatz
Modified: 2008-06-23 14:25 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Zeno Davatz 2008-06-23 14:20:44 UTC
Hi

I just tripped over this one:
http://www.matasano.com/log/1070/updates-on-drew-yaos-terrible-ruby-vulnerabilities/

And found that Gentoo latest Ruby-Version for 1.8.6 is p-114. 

But what we need it p-230 or later. See:
http://www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities/

Feedback is highly appreciated!

Best
Zeno

Reproducible: Always
Comment 1 Jeroen Roovers gentoo-dev 2008-06-23 14:25:40 UTC

*** This bug has been marked as a duplicate of bug 225465 ***