Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Ubuntu 12.10 USN-1603-2 Moderate: Ruby Excessive Access Issue

ubuntu
Calendar Grey October 23, 2012
Scroller Ubuntu
The recent Ruby patch in Ubuntu tackles significant security flaws that could expose vulnerabilities in unverified applications, reducing the risk of unauthorized data access.
Ruby could allow excessive access in untrusted programs.

Summary

Ruby could allow excessive access in untrusted programs.

Software Description:

- ruby1.8: Interpreter of object-oriented scripting language Ruby 1.8

Details:

USN-1603-1 fixed vulnerabilities in Ruby. This update provides the

corresponding updates for Ubuntu 12.10.

Original advisory details:

Shugo Maedo and Vit Ondruch discovered that Ruby incorrectly allowed untainted

strings to be modified in protective safe levels. An attacker could use this

flaw to bypass intended access restrictions. (CVE-2012-4466, CVE-2012-4481)

Topics%20covered

Topics Covered

security advisory security issue software update access control ubuntu ruby excessive access

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.10:
  libruby1.8                      1.8.7.358-4ubuntu0.1

In general, a standard system update will make all the necessary changes.

References

CVE-2012-4466, CVE-2012-4481

October 23, 2012

Topics%20covered

Topics Covered

security advisory security issue software update access control ubuntu ruby excessive access

Package Information

https://launchpad.net/ubuntu/+source/ruby1.8/1.8.7.358-4ubuntu0.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.