Stay Secure with the Latest Linux Advisories

security advisorysecurity issuesoftware update

Ubuntu 12.10 USN-1603-2 Moderate: Ruby Excessive Access Issue

Ruby could allow excessive access in untrusted programs.. =========================================================================Ubuntu Security Notice USN-1603-2 October 23, 2012 ruby1.8 vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.10 Summary: Ruby could allow excessive access in untrusted programs. Software Description: - ruby1.8: Interpreter of object-oriented scripting language Ruby 1.8 Details: USN-1603-1 fixed vulnerabilities in Ruby. This update provides the corresponding updates for Ubuntu 12.10. Original advisory details: Shugo Maedo and Vit Ondruch discovered that Ruby incorrectly allowed untainted strings to be modified in protective safe levels. An attacker could use this flaw to bypass intended access restrictions. (CVE-2012-4466, CVE-2012-4481) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 12.10: libruby1.8 1.8.7.358-4ubuntu0.1 In general, a standard system update will make all the necessary changes. References: CVE-2012-4466, CVE-2012-4481 Package Information: https://launchpad.net/ubuntu/+source/ruby1.8/1.8.7.358-4ubuntu0.1 . The recent Ruby patch in Ubuntu tackles significant security flaws that could expose vulnerabilities in unverified applications, reducing the risk of unauthorized data access.. Ubuntu Security, Ruby Access Issues, Software Updates. . LinuxSecurity.com Team

Oct 23, 2012 Ubuntu