CVE-2008-2664, CVE-2008-2725 and CVE-2008-2726. More info: http://secunia.com/advisories/29794/ with help from jcs@ tested by msf@, jcs@
23 lines
722 B
Plaintext
23 lines
722 B
Plaintext
$OpenBSD: patch-intern_h,v 1.1 2008/07/21 09:40:42 bernd Exp $
|
|
|
|
Fixes multiple security vulnerabilities.
|
|
http://secunia.com/advisories/29794/
|
|
|
|
Patch against ruby-1.8.6p114 from:
|
|
http://blog.phusion.nl/assets/r8ee-security-patch-20080623-2.txt
|
|
and
|
|
https://launchpad.net/ubuntu/+source/ruby1.8
|
|
|
|
1.8.6-p229 and 1.8.7-p21 will break rails applications.
|
|
|
|
--- intern.h.orig Wed Aug 22 04:41:24 2007
|
|
+++ intern.h Tue Jul 1 20:47:08 2008
|
|
@@ -400,6 +400,7 @@ const char *ruby_signal_name _((int));
|
|
void ruby_default_signal _((int));
|
|
/* sprintf.c */
|
|
VALUE rb_f_sprintf _((int, VALUE*));
|
|
+VALUE rb_str_format _((int, VALUE*, VALUE));
|
|
/* string.c */
|
|
VALUE rb_str_new _((const char*, long));
|
|
VALUE rb_str_new2 _((const char*));
|