openbsd-ports/lang/ruby
bernd 87244aa155 Security update to ruby-1.8.6.287.
This fixes a DNS spoofing vulnerability in Ruby's resolver lib. (CVE-2008-1447)

A DoS vulnerability in WEBrick(CVE-2008-3656), problems with Ruby's
safelevel implementation (CVE-2008-3655) and a taint check problem
in Ruby's dynamic loader (CVE-2008-3657) got fixed as well.

This also contains a fix for the REXML DoS issue. (CVE-2008-3790)

More information:
http://www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/
http://www.ruby-lang.org/en/news/2008/08/23/dos-vulnerability-in-rexml/

Tested by Jeremy Evans and jcs@. Thanks!
2008-09-28 15:43:05 +00:00
..
patches Security update to ruby-1.8.6.287. 2008-09-28 15:43:05 +00:00
pkg Security update to ruby-1.8.6.287. 2008-09-28 15:43:05 +00:00
distinfo Security update to ruby-1.8.6.287. 2008-09-28 15:43:05 +00:00
Makefile Security update to ruby-1.8.6.287. 2008-09-28 15:43:05 +00:00
ruby.port.mk add MODRUBY_LIB_DEPENDS. 2008-09-02 21:08:29 +00:00