--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-6377
2015-04-18 05:43:59
--------------------------------------------------------------------------------

Name        : ruby
Product     : Fedora 21
Version     : 2.1.6
Release     : 27.fc21
URL         : https://www.ruby-lang.org/
Summary     : An interpreter of object-oriented scripting language
Description :
Ruby is the interpreted scripting language for quick and easy
object-oriented programming.  It has many features to process text
files and to do system management tasks (as in Perl).  It is simple,
straight-forward, and extensible.

--------------------------------------------------------------------------------
Update Information:

Fixes CVE-2015-1855 ruby: OpenSSL extension hostname matching implementation violates RFC 6125
--------------------------------------------------------------------------------
ChangeLog:

* Tue Apr 14 2015 Josef Stribny  - 2.1.6-27
- Update to 2.1.6
* Fri Dec 26 2014 Orion Poplwski  - 2.1.5-26
- Disbable sse2 on i668 (bug #1101811)
* Thu Nov 20 2014 Vít Ondruch  - 2.1.5-25
- Update to Ruby 2.1.5.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1209982 - CVE-2015-1855 ruby: OpenSSL extension hostname matching implementation violates RFC 6125 [fedora-all]
        https://bugzilla.redhat.com/show_bug.cgi?id=1209982
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use
su -c 'yum update ruby' at the command line.
For more information, refer to "Managing Software with yum",
available at .

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/security/
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/

Fedora 21: ruby Security Update

April 28, 2015
Fixes CVE-2015-1855 ruby: OpenSSL extension hostname matching implementation violates RFC 6125

Summary

Ruby is the interpreted scripting language for quick and easy

object-oriented programming. It has many features to process text

files and to do system management tasks (as in Perl). It is simple,

straight-forward, and extensible.

Update Information:

Fixes CVE-2015-1855 ruby: OpenSSL extension hostname matching implementation violates RFC 6125

Change Log

* Tue Apr 14 2015 Josef Stribny - 2.1.6-27 - Update to 2.1.6 * Fri Dec 26 2014 Orion Poplwski - 2.1.5-26 - Disbable sse2 on i668 (bug #1101811) * Thu Nov 20 2014 Vít Ondruch - 2.1.5-25 - Update to Ruby 2.1.5.

References

[ 1 ] Bug #1209982 - CVE-2015-1855 ruby: OpenSSL extension hostname matching implementation violates RFC 6125 [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1209982

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update ruby' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
Name : ruby
Product : Fedora 21
Version : 2.1.6
Release : 27.fc21
URL : https://www.ruby-lang.org/
Summary : An interpreter of object-oriented scripting language

Related News

Defending Against Remote Code Execution in Google Chrome: A Critical Update
2 - 3 min read
Google Chrome, a widely used web browser, serves millions of internet users by connecting them to the online world. Unfortunately, severe
Navigating the Linux Kernel
2 - 4 min read
The Linux operating system, widely acclaimed for its robustness and security , recently received widespread media attention due to a significant
Staying a Step Ahead of Adversaries: Mitigating Chromium
2 - 4 min read
Google Chrome, one of the world's most widely used web browsers, has recently been scrutinized due to the discovery of multiple Chromium
Unmasking Cicada3301: Examining the Threat of the New Rust-Based Ransomware
2 - 4 min read
Ransomware has long been a severe threat to organizations and admins alike. Recently, cybersecurity researchers discovered a new variant called
Buffer Overflow Exploits in Linux: Origins, Impact, and Countermeasures
3 - 6 min read
Buffer overflow vulnerabilities have long been one of the biggest headaches in computer security, especially on Linux operating systems that power
8 Expert-Recommended Security Practices to Fortify Your Linux Systems
4 - 8 min read
As a Linux admin or an infosec professional, you understand how the security landscape changes due to evolving threats, newly discovered
Open Source Strategies for Enhancing Security in Digital Business Operations
5 - 9 min read
Digital transformation, powered by the principles of open-source security , is vital for businesses looking to excel in today's technology-driven
Microsoft Update Mayhem: Rescuing Linux Dual-Boot Systems from Secure Boot Woes
2 - 4 min read
Microsoft's recent patch, intended to strengthen Secure Boot defenses, has resulted in an unexpected setback for Linux-Windows dual-boot setups

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved