Alerts This Week
Warning Icon 1 609
Alerts This Week
Warning Icon 1 609

Slackware 12.1: SSA:2008-334-01 Critical: Ruby DNS Resolver Problem

slackware
Calendar Grey November 29, 2008
Dist Slackware Esm H88
Fresh ruby modules released for Slackware to resolve issues and bolster defenses against potential threats.
New ruby packages are available for Slackware 11.0, 12.0, and 12.1 to fix bugs and a security issue

Summary

Here are the details from the Slackware 12.1 ChangeLog: patches/packages/ruby-1.8.6_p287-i486-1_slack12.1.tgz: Upgraded to ruby-1.8.6-p287. This fixes several bugs in the previous Ruby update, including a security issue where the DNS resolver did not randomize the source port and transaction id sufficiently. For more information, see: https://www.cve.org/CVERecord?id=CVE-2008-1447 (* Security fix *)

Where Find New Packages

HINT: Getting slow download speeds from ftp.slackware.com? Give slackware.osuosl.org a try. This is another primary FTP site for Slackware that can be considerably faster than downloading directly from ftp.slackware.com.
Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating additional FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 11.0:
Updated package for Slackware 12.0:
Updated package for Slackware 12.1:

MD5 Signatures

Slackware 11.0 package: 68f319999719565f3f05acf61e791f92 ruby-1.8.6_p287-i486-1_slack11.0.tgz
Slackware 12.0 package: 967059ae6d9a3a3ea609472e4f3c3903 ruby-1.8.6_p287-i486-1_slack12.0.tgz
Slackware 12.1 package: bc821c4e4eee3608e1c5e2e30238b450 ruby-1.8.6_p287-i486-1_slack12.1.tgz

Severity
critical
Lowest
Low
Medium
High
Critical

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg ruby-1.8.6_p287-i486-1_slack12.1.tgz

Related News

Your message here