Red Hat Product Errata RHSA-2006:0604 - Security Advisory
Issued:
2006-07-27
Updated:
2006-07-27

RHSA-2006:0604 - Security Advisory

Synopsis

ruby security update

Type/Severity

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Updated ruby packages that fix security issues are now available.

This update has been rated as having moderate security impact by the Red
Hat Security Response Team.

Description

Ruby is an interpreted scripting language for object-oriented programming.

A number of flaws were found in the safe-level restrictions in Ruby. It
was possible for an attacker to create a carefully crafted malicious script
that can allow the bypass of certain safe-level restrictions. (CVE-2006-3694)

Users of Ruby should update to these erratum packages, which contain a
backported patch and are not vulnerable to this issue.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via Red Hat Network. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

Affected Products

  • Red Hat Enterprise Linux Server 4 x86_64
  • Red Hat Enterprise Linux Server 4 ia64
  • Red Hat Enterprise Linux Server 4 i386
  • Red Hat Enterprise Linux Server 3 x86_64
  • Red Hat Enterprise Linux Server 3 ia64
  • Red Hat Enterprise Linux Server 3 i386
  • Red Hat Enterprise Linux Server 2 i386
  • Red Hat Enterprise Linux Workstation 4 x86_64
  • Red Hat Enterprise Linux Workstation 4 ia64
  • Red Hat Enterprise Linux Workstation 4 i386
  • Red Hat Enterprise Linux Workstation 3 x86_64
  • Red Hat Enterprise Linux Workstation 3 ia64
  • Red Hat Enterprise Linux Workstation 3 i386
  • Red Hat Enterprise Linux Workstation 2 i386
  • Red Hat Enterprise Linux Desktop 4 x86_64
  • Red Hat Enterprise Linux Desktop 4 i386
  • Red Hat Enterprise Linux Desktop 3 x86_64
  • Red Hat Enterprise Linux Desktop 3 i386
  • Red Hat Enterprise Linux for IBM z Systems 4 s390x
  • Red Hat Enterprise Linux for IBM z Systems 4 s390
  • Red Hat Enterprise Linux for IBM z Systems 3 s390x
  • Red Hat Enterprise Linux for IBM z Systems 3 s390
  • Red Hat Enterprise Linux for Power, big endian 4 ppc
  • Red Hat Enterprise Linux for Power, big endian 3 ppc

Fixes

  • BZ - 199539 - CVE-2006-3694 Insecure operations in the certain safe-level restrictions
  • BZ - 199545 - CVE-2006-3694 ruby safe-level bypass

Red Hat Enterprise Linux Server 4

SRPM
x86_64
irb-1.8.1-7.EL4.6.x86_64.rpm SHA-256: 408887e96216e53de6f463c5f77e5d16d4deb113c681be60f75057df1a5e881e
irb-1.8.1-7.EL4.6.x86_64.rpm SHA-256: 408887e96216e53de6f463c5f77e5d16d4deb113c681be60f75057df1a5e881e
ruby-1.8.1-7.EL4.6.x86_64.rpm SHA-256: a6abee609b7df64dcd74de027c7360a9624d83a7de05323c3ddeb679b9ed3ea0
ruby-1.8.1-7.EL4.6.x86_64.rpm SHA-256: a6abee609b7df64dcd74de027c7360a9624d83a7de05323c3ddeb679b9ed3ea0
ruby-devel-1.8.1-7.EL4.6.x86_64.rpm SHA-256: 38c8312b3678dbb6715a1c0ba7f9bb7659f1cd81c792bad597714c946fb0441b
ruby-devel-1.8.1-7.EL4.6.x86_64.rpm SHA-256: 38c8312b3678dbb6715a1c0ba7f9bb7659f1cd81c792bad597714c946fb0441b
ruby-docs-1.8.1-7.EL4.6.x86_64.rpm SHA-256: ba14e6997e82e3fab70f6da65aed49a557d8166c9997db3d2ef464a7dc42c38b
ruby-docs-1.8.1-7.EL4.6.x86_64.rpm SHA-256: ba14e6997e82e3fab70f6da65aed49a557d8166c9997db3d2ef464a7dc42c38b
ruby-libs-1.8.1-7.EL4.6.i386.rpm SHA-256: f0e7269a7b1bfd691bf916c59e278a69a9d5e79baf5aa09de819783a185cc2a0
ruby-libs-1.8.1-7.EL4.6.i386.rpm SHA-256: f0e7269a7b1bfd691bf916c59e278a69a9d5e79baf5aa09de819783a185cc2a0
ruby-libs-1.8.1-7.EL4.6.x86_64.rpm SHA-256: 48fe6832de70caae74c91fb2cd42b297eadaa1a5fae916f416da2582d51b6003
ruby-libs-1.8.1-7.EL4.6.x86_64.rpm SHA-256: 48fe6832de70caae74c91fb2cd42b297eadaa1a5fae916f416da2582d51b6003
ruby-mode-1.8.1-7.EL4.6.x86_64.rpm SHA-256: 13db41b5674505c27bb10ae93f5633894ba8cb9302f451e932c8a7c679f8333f
ruby-mode-1.8.1-7.EL4.6.x86_64.rpm SHA-256: 13db41b5674505c27bb10ae93f5633894ba8cb9302f451e932c8a7c679f8333f
ruby-tcltk-1.8.1-7.EL4.6.x86_64.rpm SHA-256: 861195381a5982a15727e89018d7a2221d546b2bdaa164e310067fe1363c315f
ruby-tcltk-1.8.1-7.EL4.6.x86_64.rpm SHA-256: 861195381a5982a15727e89018d7a2221d546b2bdaa164e310067fe1363c315f
ia64
irb-1.8.1-7.EL4.6.ia64.rpm SHA-256: 78035826d5b889612927eadb0fd0312997d1de38955337235f6f58365b9fd725
irb-1.8.1-7.EL4.6.ia64.rpm SHA-256: 78035826d5b889612927eadb0fd0312997d1de38955337235f6f58365b9fd725
ruby-1.8.1-7.EL4.6.ia64.rpm SHA-256: c5c5073d0a5ce03e23506c7c84f30be5f94a203a6be566971540eda55e7b14f2
ruby-1.8.1-7.EL4.6.ia64.rpm SHA-256: c5c5073d0a5ce03e23506c7c84f30be5f94a203a6be566971540eda55e7b14f2
ruby-devel-1.8.1-7.EL4.6.ia64.rpm SHA-256: de592c8fc5c0552665b207c683a934e0417581bdd0748b39f504a119d60ef787
ruby-devel-1.8.1-7.EL4.6.ia64.rpm SHA-256: de592c8fc5c0552665b207c683a934e0417581bdd0748b39f504a119d60ef787
ruby-docs-1.8.1-7.EL4.6.ia64.rpm SHA-256: 055809ab5d3e2b2564f497e03b8a068b75b662427a1cdf9320016053464e7ade
ruby-docs-1.8.1-7.EL4.6.ia64.rpm SHA-256: 055809ab5d3e2b2564f497e03b8a068b75b662427a1cdf9320016053464e7ade
ruby-libs-1.8.1-7.EL4.6.i386.rpm SHA-256: f0e7269a7b1bfd691bf916c59e278a69a9d5e79baf5aa09de819783a185cc2a0
ruby-libs-1.8.1-7.EL4.6.i386.rpm SHA-256: f0e7269a7b1bfd691bf916c59e278a69a9d5e79baf5aa09de819783a185cc2a0
ruby-libs-1.8.1-7.EL4.6.ia64.rpm SHA-256: 7535d961cb955b4b5f5adb775539efd53318afe5abe6e867351826684c65d4f0
ruby-libs-1.8.1-7.EL4.6.ia64.rpm SHA-256: 7535d961cb955b4b5f5adb775539efd53318afe5abe6e867351826684c65d4f0
ruby-mode-1.8.1-7.EL4.6.ia64.rpm SHA-256: 58f190be8d56f398324f65ce89450d3f5d079d9d185c16ecce977b3babd915fb
ruby-mode-1.8.1-7.EL4.6.ia64.rpm SHA-256: 58f190be8d56f398324f65ce89450d3f5d079d9d185c16ecce977b3babd915fb
ruby-tcltk-1.8.1-7.EL4.6.ia64.rpm SHA-256: a1517f0b6310702ea9e154a04e5a6baa9f7186cb71784ff5aa1f7f07734ccc54
ruby-tcltk-1.8.1-7.EL4.6.ia64.rpm SHA-256: a1517f0b6310702ea9e154a04e5a6baa9f7186cb71784ff5aa1f7f07734ccc54
i386
irb-1.8.1-7.EL4.6.i386.rpm SHA-256: 754909fad9d2e23ab31359449c0307461a82e289dfdbff3ae5158fe10c94e3a8
irb-1.8.1-7.EL4.6.i386.rpm SHA-256: 754909fad9d2e23ab31359449c0307461a82e289dfdbff3ae5158fe10c94e3a8
ruby-1.8.1-7.EL4.6.i386.rpm SHA-256: f67ce8a3f3061364689c8e2ed08b0b2bb1c6eccd4f7f50905ce4817f232f8397
ruby-1.8.1-7.EL4.6.i386.rpm SHA-256: f67ce8a3f3061364689c8e2ed08b0b2bb1c6eccd4f7f50905ce4817f232f8397
ruby-devel-1.8.1-7.EL4.6.i386.rpm SHA-256: 05728a462b58e36d36bc2cffd782ed769b2ad1b3376bb74898818f9dfc5b64f3
ruby-devel-1.8.1-7.EL4.6.i386.rpm SHA-256: 05728a462b58e36d36bc2cffd782ed769b2ad1b3376bb74898818f9dfc5b64f3
ruby-docs-1.8.1-7.EL4.6.i386.rpm SHA-256: 9aab56e2ff3eb7071c63dd61a14d10ba1f54b1f0fd5a4cb21fcaf5355f57157e
ruby-docs-1.8.1-7.EL4.6.i386.rpm SHA-256: 9aab56e2ff3eb7071c63dd61a14d10ba1f54b1f0fd5a4cb21fcaf5355f57157e
ruby-libs-1.8.1-7.EL4.6.i386.rpm SHA-256: f0e7269a7b1bfd691bf916c59e278a69a9d5e79baf5aa09de819783a185cc2a0
ruby-libs-1.8.1-7.EL4.6.i386.rpm SHA-256: f0e7269a7b1bfd691bf916c59e278a69a9d5e79baf5aa09de819783a185cc2a0
ruby-mode-1.8.1-7.EL4.6.i386.rpm SHA-256: 5c5aced4cb3c30888db4f23339c63f1820aa3ddd453465586cd4e9b769f342ce
ruby-mode-1.8.1-7.EL4.6.i386.rpm SHA-256: 5c5aced4cb3c30888db4f23339c63f1820aa3ddd453465586cd4e9b769f342ce
ruby-tcltk-1.8.1-7.EL4.6.i386.rpm SHA-256: aa64ae1a0df91ee9884d8d6af9ce57c73c329807df2665be36590b7102f435d3
ruby-tcltk-1.8.1-7.EL4.6.i386.rpm SHA-256: aa64ae1a0df91ee9884d8d6af9ce57c73c329807df2665be36590b7102f435d3

Red Hat Enterprise Linux Server 3

SRPM
x86_64
ia64
i386

Red Hat Enterprise Linux Server 2

SRPM
i386

Red Hat Enterprise Linux Workstation 4

SRPM
x86_64
irb-1.8.1-7.EL4.6.x86_64.rpm SHA-256: 408887e96216e53de6f463c5f77e5d16d4deb113c681be60f75057df1a5e881e
ruby-1.8.1-7.EL4.6.x86_64.rpm SHA-256: a6abee609b7df64dcd74de027c7360a9624d83a7de05323c3ddeb679b9ed3ea0
ruby-devel-1.8.1-7.EL4.6.x86_64.rpm SHA-256: 38c8312b3678dbb6715a1c0ba7f9bb7659f1cd81c792bad597714c946fb0441b
ruby-docs-1.8.1-7.EL4.6.x86_64.rpm SHA-256: ba14e6997e82e3fab70f6da65aed49a557d8166c9997db3d2ef464a7dc42c38b
ruby-libs-1.8.1-7.EL4.6.i386.rpm SHA-256: f0e7269a7b1bfd691bf916c59e278a69a9d5e79baf5aa09de819783a185cc2a0
ruby-libs-1.8.1-7.EL4.6.x86_64.rpm SHA-256: 48fe6832de70caae74c91fb2cd42b297eadaa1a5fae916f416da2582d51b6003
ruby-mode-1.8.1-7.EL4.6.x86_64.rpm SHA-256: 13db41b5674505c27bb10ae93f5633894ba8cb9302f451e932c8a7c679f8333f
ruby-tcltk-1.8.1-7.EL4.6.x86_64.rpm SHA-256: 861195381a5982a15727e89018d7a2221d546b2bdaa164e310067fe1363c315f
ia64
irb-1.8.1-7.EL4.6.ia64.rpm SHA-256: 78035826d5b889612927eadb0fd0312997d1de38955337235f6f58365b9fd725
ruby-1.8.1-7.EL4.6.ia64.rpm SHA-256: c5c5073d0a5ce03e23506c7c84f30be5f94a203a6be566971540eda55e7b14f2
ruby-devel-1.8.1-7.EL4.6.ia64.rpm SHA-256: de592c8fc5c0552665b207c683a934e0417581bdd0748b39f504a119d60ef787
ruby-docs-1.8.1-7.EL4.6.ia64.rpm SHA-256: 055809ab5d3e2b2564f497e03b8a068b75b662427a1cdf9320016053464e7ade
ruby-libs-1.8.1-7.EL4.6.i386.rpm SHA-256: f0e7269a7b1bfd691bf916c59e278a69a9d5e79baf5aa09de819783a185cc2a0
ruby-libs-1.8.1-7.EL4.6.ia64.rpm SHA-256: 7535d961cb955b4b5f5adb775539efd53318afe5abe6e867351826684c65d4f0
ruby-mode-1.8.1-7.EL4.6.ia64.rpm SHA-256: 58f190be8d56f398324f65ce89450d3f5d079d9d185c16ecce977b3babd915fb
ruby-tcltk-1.8.1-7.EL4.6.ia64.rpm SHA-256: a1517f0b6310702ea9e154a04e5a6baa9f7186cb71784ff5aa1f7f07734ccc54
i386
irb-1.8.1-7.EL4.6.i386.rpm SHA-256: 754909fad9d2e23ab31359449c0307461a82e289dfdbff3ae5158fe10c94e3a8
ruby-1.8.1-7.EL4.6.i386.rpm SHA-256: f67ce8a3f3061364689c8e2ed08b0b2bb1c6eccd4f7f50905ce4817f232f8397
ruby-devel-1.8.1-7.EL4.6.i386.rpm SHA-256: 05728a462b58e36d36bc2cffd782ed769b2ad1b3376bb74898818f9dfc5b64f3
ruby-docs-1.8.1-7.EL4.6.i386.rpm SHA-256: 9aab56e2ff3eb7071c63dd61a14d10ba1f54b1f0fd5a4cb21fcaf5355f57157e
ruby-libs-1.8.1-7.EL4.6.i386.rpm SHA-256: f0e7269a7b1bfd691bf916c59e278a69a9d5e79baf5aa09de819783a185cc2a0
ruby-mode-1.8.1-7.EL4.6.i386.rpm SHA-256: 5c5aced4cb3c30888db4f23339c63f1820aa3ddd453465586cd4e9b769f342ce
ruby-tcltk-1.8.1-7.EL4.6.i386.rpm SHA-256: aa64ae1a0df91ee9884d8d6af9ce57c73c329807df2665be36590b7102f435d3

Red Hat Enterprise Linux Workstation 3

SRPM
x86_64
ia64
i386

Red Hat Enterprise Linux Workstation 2

SRPM
i386

Red Hat Enterprise Linux Desktop 4

SRPM
x86_64
irb-1.8.1-7.EL4.6.x86_64.rpm SHA-256: 408887e96216e53de6f463c5f77e5d16d4deb113c681be60f75057df1a5e881e
ruby-1.8.1-7.EL4.6.x86_64.rpm SHA-256: a6abee609b7df64dcd74de027c7360a9624d83a7de05323c3ddeb679b9ed3ea0
ruby-devel-1.8.1-7.EL4.6.x86_64.rpm SHA-256: 38c8312b3678dbb6715a1c0ba7f9bb7659f1cd81c792bad597714c946fb0441b
ruby-docs-1.8.1-7.EL4.6.x86_64.rpm SHA-256: ba14e6997e82e3fab70f6da65aed49a557d8166c9997db3d2ef464a7dc42c38b
ruby-libs-1.8.1-7.EL4.6.i386.rpm SHA-256: f0e7269a7b1bfd691bf916c59e278a69a9d5e79baf5aa09de819783a185cc2a0
ruby-libs-1.8.1-7.EL4.6.x86_64.rpm SHA-256: 48fe6832de70caae74c91fb2cd42b297eadaa1a5fae916f416da2582d51b6003
ruby-mode-1.8.1-7.EL4.6.x86_64.rpm SHA-256: 13db41b5674505c27bb10ae93f5633894ba8cb9302f451e932c8a7c679f8333f
ruby-tcltk-1.8.1-7.EL4.6.x86_64.rpm SHA-256: 861195381a5982a15727e89018d7a2221d546b2bdaa164e310067fe1363c315f
i386
irb-1.8.1-7.EL4.6.i386.rpm SHA-256: 754909fad9d2e23ab31359449c0307461a82e289dfdbff3ae5158fe10c94e3a8
ruby-1.8.1-7.EL4.6.i386.rpm SHA-256: f67ce8a3f3061364689c8e2ed08b0b2bb1c6eccd4f7f50905ce4817f232f8397
ruby-devel-1.8.1-7.EL4.6.i386.rpm SHA-256: 05728a462b58e36d36bc2cffd782ed769b2ad1b3376bb74898818f9dfc5b64f3
ruby-docs-1.8.1-7.EL4.6.i386.rpm SHA-256: 9aab56e2ff3eb7071c63dd61a14d10ba1f54b1f0fd5a4cb21fcaf5355f57157e
ruby-libs-1.8.1-7.EL4.6.i386.rpm SHA-256: f0e7269a7b1bfd691bf916c59e278a69a9d5e79baf5aa09de819783a185cc2a0
ruby-mode-1.8.1-7.EL4.6.i386.rpm SHA-256: 5c5aced4cb3c30888db4f23339c63f1820aa3ddd453465586cd4e9b769f342ce
ruby-tcltk-1.8.1-7.EL4.6.i386.rpm SHA-256: aa64ae1a0df91ee9884d8d6af9ce57c73c329807df2665be36590b7102f435d3

Red Hat Enterprise Linux Desktop 3

SRPM
x86_64
i386

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
s390x
irb-1.8.1-7.EL4.6.s390x.rpm SHA-256: 9749e78b6254eafab3b50421622ad36dfdbbe0357cd43af732bf42af894e17d7
ruby-1.8.1-7.EL4.6.s390x.rpm SHA-256: 6b7411b5107c59c8376cfaaf14033e9efcc02cdbfcf88b0616468989cad65a94
ruby-devel-1.8.1-7.EL4.6.s390x.rpm SHA-256: e13e464c4925195ff81fbba28cced832a0c123d2903f7582b014a12f872b2db3
ruby-docs-1.8.1-7.EL4.6.s390x.rpm SHA-256: 2aa42fbbeaaa3dee9293c329e4562de7bc69bfbcd7f43144252f7b8675ba79b4
ruby-libs-1.8.1-7.EL4.6.s390.rpm SHA-256: afe595d1c58a86a4aa9cab5575107fe3bd11affb526814a0a40d2be449cdd396
ruby-libs-1.8.1-7.EL4.6.s390x.rpm SHA-256: e07f024c739ff3b23f9bd345ec5ef3743093f59213e2422c6d5411d72a4c5ccc
ruby-mode-1.8.1-7.EL4.6.s390x.rpm SHA-256: 5905bb9e996f84ad09e94568c63491efce79ede9e0e97775cf2d1a543a366bf2
ruby-tcltk-1.8.1-7.EL4.6.s390x.rpm SHA-256: 8c681b124aff5fe77547bb5a6d6e849bfc7669e7a1ad19eeb37043b3b74c205a
s390
irb-1.8.1-7.EL4.6.s390.rpm SHA-256: 01580aee4dcef3d98646311182710a49b408ee8e8266d41ead19091ef26437c8
ruby-1.8.1-7.EL4.6.s390.rpm SHA-256: fadb776bcd06185f6616ca98751affc9b21be32deb0e9e18fbfd0880ed10dfab
ruby-devel-1.8.1-7.EL4.6.s390.rpm SHA-256: a99c2a0bccbd142c90a718e69eccd567cc0c854186256170c3f7974e54cd295f
ruby-docs-1.8.1-7.EL4.6.s390.rpm SHA-256: ff9f8778c63caddbf7fa12ebf44b20a8c495ebf4ba6737d83388ffe4a1ef0c87
ruby-libs-1.8.1-7.EL4.6.s390.rpm SHA-256: afe595d1c58a86a4aa9cab5575107fe3bd11affb526814a0a40d2be449cdd396
ruby-mode-1.8.1-7.EL4.6.s390.rpm SHA-256: 7980e529467a481eea3b1ef13f16f1dfd96890d824768184e99960c7f6d7ada1
ruby-tcltk-1.8.1-7.EL4.6.s390.rpm SHA-256: cbf9149b47934b3b83aadcc2bf448f941772d29d13ec38c99b6f204b155c8172

Red Hat Enterprise Linux for IBM z Systems 3

SRPM
s390x
s390

Red Hat Enterprise Linux for Power, big endian 4

SRPM
ppc
irb-1.8.1-7.EL4.6.ppc.rpm SHA-256: a86b32da4a07728308a651ece4e1ddbf38323b420ead40a1d1b7926a4b29502e
ruby-1.8.1-7.EL4.6.ppc.rpm SHA-256: 6f15aa6e76481da1b0a611697bc7bba3a6bedceea9509f49f961efa6269b83eb
ruby-devel-1.8.1-7.EL4.6.ppc.rpm SHA-256: a3e3a4bf68855a89263da0e4fb1d2724aebb3c4696b7b81e7c7ec984b6d4ab9b
ruby-docs-1.8.1-7.EL4.6.ppc.rpm SHA-256: f474ec5140360696dd58e2d446d8b4bb8634565d6632f4ee23e954d6a32b0747
ruby-libs-1.8.1-7.EL4.6.ppc.rpm SHA-256: 7e44b17e3d14b02277bc7285e76804fbd9dac85f0de4db36cad6c6e99169ab92
ruby-libs-1.8.1-7.EL4.6.ppc64.rpm SHA-256: f811b45beda9492cf6253ce4f13c0cc8e91f3ceac5281978376d4eae1b492c87
ruby-mode-1.8.1-7.EL4.6.ppc.rpm SHA-256: ac5cd96962d7cf7064f00ca1f6c5376ccc37b520be022fb03e6444d77dcb36c0
ruby-tcltk-1.8.1-7.EL4.6.ppc.rpm SHA-256: 5c42da5c92d9c30a3e463d7ae758b072d14d701607dfe6fd5c1d005f74726175

Red Hat Enterprise Linux for Power, big endian 3

SRPM
ppc

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.