| ruby-tcltk-1.8.5-31.el5_9.i386
[1.6 MiB] |
Changelog
by Vít Ondruch (2013-07-08):
- Fix regression introduced by CVE-2013-4073
https://bugs.ruby-lang.org/issues/8575
* ruby-2.0.0-p255-Fix-SSL-client-connection-crash-for-SAN-marked-critical.patch
- Related: rhbz#979297
|
| ruby-tcltk-1.8.5-29.el5_9.i386
[1.6 MiB] |
Changelog
by Vít Ondruch (2013-02-28):
- Fix regression introduced by fix for entity expansion DOS vulnerability
in REXML (https://bugs.ruby-lang.org/issues/7961)
* ruby-2.0.0-add-missing-rexml-require.patch
- Related: rhbz#915377
|
| ruby-tcltk-1.8.5-27.el5.i386
[1.6 MiB] |
Changelog
by Vít Ondruch (2012-10-25):
- unintentional file creation caused by inserting an illegal NUL character
* ruby-1.8.6-CVE-2012-4522-io.c-pipe_open-command-name-should-not-contain-null-.patch
- Related: rhbz#867750
|
| ruby-tcltk-1.8.5-22.el5_7.1.i386
[1.6 MiB] |
Changelog
by Vít Ondruch (2012-01-17):
- Properly initialize the random number generator when forking new process
* ruby-1.8.7-CVE-2011-3009.patch
- Related: rhbz#768829
|
| ruby-tcltk-1.8.5-19.el5_6.1.i386
[1.6 MiB] |
Changelog
by Vít Ondruch (2011-05-02):
- Address CVE-2011-1004 "Symlink race condition by removing directory trees in
fileutils module"
* ruby-1.8.7-CVE-2011-1004.patch
- Address CVE-2011-1005 "Untrusted codes able to modify arbitrary strings"
* ruby-1.8.7-CVE-2011-1005.patch
- Address CVE-2011-0188 "memory corruption in BigDecimal on 64bit platforms"
* ruby-1.8.7-CVE-2011-0188.patch
- Address CVE-CVE-2010-0541 "Ruby WEBrick javascript injection flaw"
* ruby-1.8.7-CVE-2010-0541.patch
- Address CVE-CVE-2009-4492 "ruby WEBrick log escape sequence"
* ruby-1.8.6-CVE-2009-4492.patch
- Resolves: rhbz#709957
|
| ruby-tcltk-1.8.5-5.el5_3.7.i386
[1.6 MiB] |
Changelog
by Akira TAGOH (2009-06-17):
- security fixes. (#505087)
- CVE-2007-1558: APOP password disclosure vulnerability.
- CVE-2009-0642: Incorrect checks for validity of X.509 certificates.
- CVE-2009-1904: DoS vulnerability in BigDecimal.
|
| ruby-tcltk-1.8.5-5.el5_2.6.i386
[1.6 MiB] |
Changelog
by Akira TAGOH (2008-11-19):
- security fix (#470262)
- CVE-2008-4310: real fix for CVE-2008-3656. original patch named as fix for
CVE-2008-3656 actually fixed different issue (CVE-2008-1145),
hence we are providing correct patch and renaming original
patch to refer to proper CVE.
|
| ruby-tcltk-1.8.5-5.el5_2.5.i386
[1.6 MiB] |
Changelog
by Akira TAGOH (2008-10-08):
- Build with -fno-strict-aliasing.
|
| ruby-tcltk-1.8.5-5.el5_2.3.i386
[1.6 MiB] |
Changelog
by Akira TAGOH (2008-07-02):
- CVE-2008-2376: Integer overflow in rb_ary_fill().
|
| ruby-tcltk-1.8.5-5.el5.1.i386
[1.6 MiB] |
Changelog
by Akira TAGOH (2007-11-01):
- security fix for CVE-2007-5162 and CVE-2007-5770
- ruby-1.8.5-CVE-2007-5162.patch: fix issues that is insufficient verification
of SSL certificate. (#320331)
- Fix the multilib regression issue.
|