From: [email protected]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------ Debian Security Advisory DSA-1860-1 [email protected] http://www.debian.org/security/ Florian Weimer
August 12, 2009 http://www.debian.org/security/faq
- ------------------------------------------------------------------------

Package : ruby1.8, ruby1.9
Vulnerability : several
Problem type : remote
Debian-specific: no
CVE Id(s) : CVE-2009-0642 CVE-2009-1904

Several vulnerabilities have been discovered in Ruby. The Common Vulnerabilities and Exposures project identifies the following
problems:

CVE-2009-0642

The return value from the OCSP_basic_verify function was not checked
properly, allowing continued use of a revoked certificate.

CVE-2009-1904

An issue in parsing BigDecimal numbers can result in a
denial-of-service condition (crash).

The following matrix identifies fixed versions:

ruby1.8 ruby1.9
oldstable (etch) 1.8.5-4etch5 1.9.0+20060609-1etch5
stable (lenny) 1.8.7.72-3lenny1 1.9.0.2-9lenny1
unstable (sid) 1.8.7.173-1 (soon)

We recommend that you upgrade your Ruby packages.

Upgrade instructions
- --------------------

wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
will update the internal database
apt-get upgrade
will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian GNU/Linux 4.0 alias etch
- -------------------------------

Source archives:

http://security.debian.org/pool/updates/main/r/ruby1.8/ruby1.8_1.8.5.orig.tar.gz
Size/MD5 checksum: 4434227 aae9676332fcdd52f66c3d99b289878f
http://security.debian.org/pool/updates/main/r/ruby1.9/ruby1.9_1.9.0+20060609.orig.tar.gz
Size/MD5 checksum: 4450198 483d9b46a973c7e14f7586f0b1129891
http://security.debian.org/pool/updates/main/r/ruby1.9/ruby1.9_1.9.0+20060609-1etch5.diff.gz
Size/MD5 checksum: 36468 8197232070673e4af27d060bacd34d71
http://security.debian.org/pool/updates/main/r/ruby1.8/ruby1.8_1.8.5-4etch5.diff.gz
Size/MD5 checksum: 148191 71712b0eadff68c89993a9152b9a211d
http://security.debian.org/pool/updates/main/r/ruby1.9/ruby1.9_1.9.0+20060609-1etch5.dsc
Size/MD5 checksum: 1102 9d6d9eedc0166711d69dcb3bf2cbc77f
http://security.debian.org/pool/updates/main/r/ruby1.8/ruby1.8_1.8.5-4etch5.dsc
Size/MD5 checksum: 1079 b7a7a9e210b6150df9df9de965148b9d

Architecture independent packages:

http://security.debian.org/pool/updates/main/r/ruby1.8/ri1.8_1.8.5-4etch5_all.deb
Size/MD5 checksum: 1246256 4653efb9c298e63f3a83a21cec8dbbd9
http://security.debian.org/pool/updates/main/r/ruby1.9/ruby1.9-elisp_1.9.0+20060609-1etch5_all.deb
Size/MD5 checksum: 229678 b3ee42c0cfa95e930fb72babd56aeb16
http://security.debian.org/pool/updates/main/r/ruby1.9/rdoc1.9_1.9.0+20060609-1etch5_all.deb
Size/MD5 checksum: 320308 7a80ef48b0e3302db11d9306de82c0ea
http://security.debian.org/pool/updates/main/r/ruby1.9/irb1.9_1.9.0+20060609-1etch5_all.deb
Size/MD5 checksum: 256978 74141346a6f6a229b653fa64d74014e3
http://security.debian.org/pool/updates/main/r/ruby1.9/ruby1.9-examples_1.9.0+20060609-1etch5_all.deb
Size/MD5 checksum: 263824 1aa2a6808360406297bf3541a94d874c
http://security.debian.org/pool/updates/main/r/ruby1.8/ruby1.8-examples_1.8.5-4etch5_all.deb
Size/MD5 checksum: 243532 4ffcc8d7c6689b68f78a3283aff69eed
http://security.debian.org/pool/updates/main/r/ruby1.8/irb1.8_1.8.5-4etch5_all.deb
Size/MD5 checksum: 236942 3d8d4fcf267f874877306da49169270a
http://security.debian.org/pool/updates/main/r/ruby1.8/ruby1.8-elisp_1.8.5-4etch5_all.deb
Size/MD5 checksum: 211018 7d332e6c11203c6a370d2c79fab9334f
http://security.debian.org/pool/updates/main/r/ruby1.9/ri1.9_1.9.0+20060609-1etch5_all.deb
Size/MD5 checksum: 691458 ae5f6f1ac87e900ae065682cc9c17c5f
http://security.debian.org/pool/updates/main/r/ruby1.8/rdoc1.8_1.8.5-4etch5_all.deb
Size/MD5 checksum: 311556 5d41413d43090616020e66fcbec0fd45

alpha architecture (DEC Alpha)

http://security.debian.org/pool/updates/main/r/ruby1.9/libopenssl-ruby1.9_1.9.0+20060609-1etch5_alpha.deb
Size/MD5 checksum: 325022 57b181370e9f5a2c919382b3dced68e8
http://security.debian.org/pool/updates/main/r/ruby1.9/ruby1.9_1.9.0+20060609-1etch5_alpha.deb
Size/MD5 checksum: 238058 e11ef79ffb45581f284368bb1a95588d
http://security.debian.org/pool/updates/main/r/ruby1.9/libdbm-ruby1.9_1.9.0+20060609-1etch5_alpha.deb
Size/MD5 checksum: 217876 a578ced847038930fb362a72cdf9a7b2
http://security.debian.org/pool/updates/main/r/ruby1.8/ruby1.8-dev_1.8.5-4etch5_alpha.deb
Size/MD5 checksum: 903780 da8848cb063d706c8d78c8281491fe3b
http://security.debian.org/pool/updates/main/r/ruby1.8/libtcltk-ruby1.8_1.8.5-4etch5_alpha.deb
Size/MD5 checksum: 1869364 05cc1cd324be3c05071e578fd605be5c
http://security.debian.org/pool/updates/main/r/ruby1.8/libgdbm-ruby1.8_1.8.5-4etch5_alpha.deb
Size/MD5 checksum: 199496 dbfb5c1813976b990449da1373b2424b
http://security.debian.org/pool/updates/main/r/ruby1.9/libgdbm-ruby1.9_1.9.0+20060609-1etch5_alpha.deb
Size/MD5 checksum: 217208 01c722b15e4f9afc400b242bdd512667
http://security.debian.org/pool/updates/main/r/ruby1.9/libruby1.9_1.9.0+20060609-1etch5_alpha.deb
Size/MD5 checksum: 1890206 be88366e483e9e8c3814a54047dbeafa
http://security.debian.org/pool/updates/main/r/ruby1.8/libruby1.8_1.8.5-4etch5_alpha.deb
Size/MD5 checksum: 1638840 ceb08ea201bc4066f973cadf63df1df0
http://security.debian.org/pool/updates/main/r/ruby1.9/libruby1.9-dbg_1.9.0+20060609-1etch5_alpha.deb
Size/MD5 checksum: 340472 b6b7f071b361e5901d2fab4fa03c3541
http://security.debian.org/pool/updates/main/r/ruby1.8/ruby1.8_1.8.5-4etch5_alpha.deb
Size/MD5 checksum: 219740 effa9ae4b3103e7d7d1bf815a4ba3e00
http://security.debian.org/pool/updates/main/r/ruby1.8/libreadline-ruby1.8_1.8.5-4etch5_alpha.deb
Size/MD5 checksum: 199460 6d6f32a7f8ac5fb8b3e1d91e41f77815

[continued in next message]

--- SoupGate-Win32 v1.05
* Origin: you cannot sedate... all the things you hate (1:229/2)