Commit Graph

4 Commits

Author SHA1 Message Date
bernd
87244aa155 Security update to ruby-1.8.6.287.
This fixes a DNS spoofing vulnerability in Ruby's resolver lib. (CVE-2008-1447)

A DoS vulnerability in WEBrick(CVE-2008-3656), problems with Ruby's
safelevel implementation (CVE-2008-3655) and a taint check problem
in Ruby's dynamic loader (CVE-2008-3657) got fixed as well.

This also contains a fix for the REXML DoS issue. (CVE-2008-3790)

More information:
http://www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/
http://www.ruby-lang.org/en/news/2008/08/23/dos-vulnerability-in-rexml/

Tested by Jeremy Evans and jcs@. Thanks!
2008-09-28 15:43:05 +00:00
bernd
340327fd48 Update to ruby-1.8.6 patchlevel 111.
This is a long overdue update which contains lots of bug fixes and some
security fixes.

Take over maintainership from msf@.

Tested by many. Thank you very much!

ok jcs@, msf@
2007-12-27 18:32:32 +00:00
bernd
b2be6681a6 Update to ruby-1.8.5.
See http://eigenclass.org/hiki.rb?ruby+1.8.5+changelog for a summary of
changes.

tested by krw@
ok msf@, sturm@
2006-10-02 07:48:08 +00:00
alek
97ef7796e6 - SHARED_LIBS
- Regen PLIST
- Bump PKGNAME

ok msf@, steven@
2006-01-08 10:39:31 +00:00