Synopsis

Moderate: ruby security update

Type/Severity

Security Advisory: Moderate

Topic

Updated ruby packages that fix several security issues are now available
for Red Hat Enterprise Linux 5.

This update has been rated as having moderate security impact by the Red
Hat Security Response Team.

Description

Ruby is an interpreted scripting language for object-oriented programming.

An SSL certificate validation flaw was discovered in several Ruby Net
modules. The libraries were not checking the requested host name against
the common name (CN) in the SSL server certificate, possibly allowing a man
in the middle attack. (CVE-2007-5162, CVE-2007-5770)

Users of Ruby should upgrade to these updated packages, which contain a
backported patch to resolve these issues.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Server - Extended Update Support 5.1 x86_64
• Red Hat Enterprise Linux Server - Extended Update Support 5.1 ia64
• Red Hat Enterprise Linux Server - Extended Update Support 5.1 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 5.1 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 5.1 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 313691 - CVE-2007-5162 ruby Net:HTTP insufficient verification of SSL certificate
• BZ - 362081 - CVE-2007-5770 ruby insufficient verification of SSL certificate in various net::* modules

CVEs

• CVE-2007-5770
• CVE-2007-5162

References

• http://www.redhat.com/security/updates/classification/#moderate

Red Hat Enterprise Linux Server 5

SRPM
ruby-1.8.5-5.el5_1.1.src.rpm	SHA-256: 2d6a73d7632477802798241063a19b2caacab4adfd9dfd3857977152b918d3d2
x86_64
ruby-1.8.5-5.el5_1.1.x86_64.rpm	SHA-256: 1b183b49e868c0b9fe46360b893d95c6e1218eb4f5b1baaf9706dfff889c1003
ruby-devel-1.8.5-5.el5_1.1.i386.rpm	SHA-256: e76d6cff4ca7a0e5e87b300af326b13b9ecec6675e6798d5aedee70799350877
ruby-devel-1.8.5-5.el5_1.1.x86_64.rpm	SHA-256: 96ee44681e8d9e257ac0afdb8a3c636bc86db599ffde159877b2b2ac302bd3d1
ruby-docs-1.8.5-5.el5_1.1.x86_64.rpm	SHA-256: 64bb1dbd5b3bfe01f3d2a79a654a7d51a98045071de35632f0e3d0f00f1d4932
ruby-irb-1.8.5-5.el5_1.1.x86_64.rpm	SHA-256: fdc8ba4074db667e3ed84bafd355c3a8fc1f6a408904ef28917f8ddcacf8ccf8
ruby-libs-1.8.5-5.el5_1.1.i386.rpm	SHA-256: a30773093cfa2423db37a4c803b7435f11318e1703d66216244ffab051de55d0
ruby-libs-1.8.5-5.el5_1.1.x86_64.rpm	SHA-256: cb1eb727aec405c2e19731699f831c7a8b0d070ff3f5f3e7215ca50589bc2e06
ruby-mode-1.8.5-5.el5_1.1.x86_64.rpm	SHA-256: 23b98b159b075829335b38bff3665fd3ab6bd189733184c270d6aaea3550e944
ruby-rdoc-1.8.5-5.el5_1.1.x86_64.rpm	SHA-256: ee371308b8d5b2611355f6a6db98cd8737d838be4f7c62cf971878693a7f1409
ruby-ri-1.8.5-5.el5_1.1.x86_64.rpm	SHA-256: 19945e48d50d1f92165312ab60e61b81d681ce47709417e04794a228c0167c05
ruby-tcltk-1.8.5-5.el5_1.1.x86_64.rpm	SHA-256: 10bf171d44607be568691149ea4188f1ad5a1177f62cf13526ea10c633e70746
ia64
ruby-1.8.5-5.el5_1.1.ia64.rpm	SHA-256: fca33ba213553d7452e01954db22d80634a2aeec9627b41911f255809de76f69
ruby-devel-1.8.5-5.el5_1.1.ia64.rpm	SHA-256: 7d6b3ba25799e46cee3d6ebd6fd20344a7dafefe7214dc0c843dad55c1317bc6
ruby-docs-1.8.5-5.el5_1.1.ia64.rpm	SHA-256: cb6546a309e42b5060eb8ec02d9580abab339bf8c80ba03166ee3e4446b57319
ruby-irb-1.8.5-5.el5_1.1.ia64.rpm	SHA-256: 440395bd6140e7c99c4cb5882a553b1f88c5bf0e2d45fa0b20323a1bd771a5eb
ruby-libs-1.8.5-5.el5_1.1.ia64.rpm	SHA-256: b4e74d1b9abd1c5315096222f251f463e25e26c2af99aace2b5b5005a1dfda3e
ruby-mode-1.8.5-5.el5_1.1.ia64.rpm	SHA-256: 9652e29b3e924a1a134bc91a58837a32b5eb306ec4dcb5bb748f042c60d59916
ruby-rdoc-1.8.5-5.el5_1.1.ia64.rpm	SHA-256: 841f0569abeaeb2d324037ff1d0520ee3085f1b89f070b5d408d0696c7502c6a
ruby-ri-1.8.5-5.el5_1.1.ia64.rpm	SHA-256: 47f7bb36e3afac0b512b97b72a450a84941f73b523e50c799d991a1b64bb8e85
ruby-tcltk-1.8.5-5.el5_1.1.ia64.rpm	SHA-256: a359d597241410b51431c77c27f2dac1f708505fadce4d194ff31c0d091c2bc2
i386
ruby-1.8.5-5.el5_1.1.i386.rpm	SHA-256: 2183204d84f26aebc93b84e2c32d7d14ec8b8a5e628ffb013203a8fd296e96c0
ruby-devel-1.8.5-5.el5_1.1.i386.rpm	SHA-256: e76d6cff4ca7a0e5e87b300af326b13b9ecec6675e6798d5aedee70799350877
ruby-docs-1.8.5-5.el5_1.1.i386.rpm	SHA-256: 4c57389131a4e84a7f52a4a0cb09b3aa52cb061d1fa5848738d37a14a74a3c30
ruby-irb-1.8.5-5.el5_1.1.i386.rpm	SHA-256: 25e9dbe2ff7fccfee7fb78d89f26cb2d5c6310a5d571843e28930eeee9ae100b
ruby-libs-1.8.5-5.el5_1.1.i386.rpm	SHA-256: a30773093cfa2423db37a4c803b7435f11318e1703d66216244ffab051de55d0
ruby-mode-1.8.5-5.el5_1.1.i386.rpm	SHA-256: 48da3dbf7cddb9c590ea4dbe9c6aea346895bd27c83cdeb002887585ef2c2190
ruby-rdoc-1.8.5-5.el5_1.1.i386.rpm	SHA-256: 2cdbfba6bb60b479fc18801d3308d726f58e65058f254cc6851561623f50ded2
ruby-ri-1.8.5-5.el5_1.1.i386.rpm	SHA-256: 510789181684eed6d5647d6ee57b5e979215e6956b8c1d557737c03ca0f940fb
ruby-tcltk-1.8.5-5.el5_1.1.i386.rpm	SHA-256: d7bd360e3d131fdd3a42a709089f5caea2e558b8d4698416826913226b4895d0

Red Hat Enterprise Linux Workstation 5

SRPM
ruby-1.8.5-5.el5_1.1.src.rpm	SHA-256: 2d6a73d7632477802798241063a19b2caacab4adfd9dfd3857977152b918d3d2
x86_64
ruby-1.8.5-5.el5_1.1.x86_64.rpm	SHA-256: 1b183b49e868c0b9fe46360b893d95c6e1218eb4f5b1baaf9706dfff889c1003
ruby-devel-1.8.5-5.el5_1.1.i386.rpm	SHA-256: e76d6cff4ca7a0e5e87b300af326b13b9ecec6675e6798d5aedee70799350877
ruby-devel-1.8.5-5.el5_1.1.x86_64.rpm	SHA-256: 96ee44681e8d9e257ac0afdb8a3c636bc86db599ffde159877b2b2ac302bd3d1
ruby-docs-1.8.5-5.el5_1.1.x86_64.rpm	SHA-256: 64bb1dbd5b3bfe01f3d2a79a654a7d51a98045071de35632f0e3d0f00f1d4932
ruby-irb-1.8.5-5.el5_1.1.x86_64.rpm	SHA-256: fdc8ba4074db667e3ed84bafd355c3a8fc1f6a408904ef28917f8ddcacf8ccf8
ruby-libs-1.8.5-5.el5_1.1.i386.rpm	SHA-256: a30773093cfa2423db37a4c803b7435f11318e1703d66216244ffab051de55d0
ruby-libs-1.8.5-5.el5_1.1.x86_64.rpm	SHA-256: cb1eb727aec405c2e19731699f831c7a8b0d070ff3f5f3e7215ca50589bc2e06
ruby-mode-1.8.5-5.el5_1.1.x86_64.rpm	SHA-256: 23b98b159b075829335b38bff3665fd3ab6bd189733184c270d6aaea3550e944
ruby-rdoc-1.8.5-5.el5_1.1.x86_64.rpm	SHA-256: ee371308b8d5b2611355f6a6db98cd8737d838be4f7c62cf971878693a7f1409
ruby-ri-1.8.5-5.el5_1.1.x86_64.rpm	SHA-256: 19945e48d50d1f92165312ab60e61b81d681ce47709417e04794a228c0167c05
ruby-tcltk-1.8.5-5.el5_1.1.x86_64.rpm	SHA-256: 10bf171d44607be568691149ea4188f1ad5a1177f62cf13526ea10c633e70746
i386
ruby-1.8.5-5.el5_1.1.i386.rpm	SHA-256: 2183204d84f26aebc93b84e2c32d7d14ec8b8a5e628ffb013203a8fd296e96c0
ruby-devel-1.8.5-5.el5_1.1.i386.rpm	SHA-256: e76d6cff4ca7a0e5e87b300af326b13b9ecec6675e6798d5aedee70799350877
ruby-docs-1.8.5-5.el5_1.1.i386.rpm	SHA-256: 4c57389131a4e84a7f52a4a0cb09b3aa52cb061d1fa5848738d37a14a74a3c30
ruby-irb-1.8.5-5.el5_1.1.i386.rpm	SHA-256: 25e9dbe2ff7fccfee7fb78d89f26cb2d5c6310a5d571843e28930eeee9ae100b
ruby-libs-1.8.5-5.el5_1.1.i386.rpm	SHA-256: a30773093cfa2423db37a4c803b7435f11318e1703d66216244ffab051de55d0
ruby-mode-1.8.5-5.el5_1.1.i386.rpm	SHA-256: 48da3dbf7cddb9c590ea4dbe9c6aea346895bd27c83cdeb002887585ef2c2190
ruby-rdoc-1.8.5-5.el5_1.1.i386.rpm	SHA-256: 2cdbfba6bb60b479fc18801d3308d726f58e65058f254cc6851561623f50ded2
ruby-ri-1.8.5-5.el5_1.1.i386.rpm	SHA-256: 510789181684eed6d5647d6ee57b5e979215e6956b8c1d557737c03ca0f940fb
ruby-tcltk-1.8.5-5.el5_1.1.i386.rpm	SHA-256: d7bd360e3d131fdd3a42a709089f5caea2e558b8d4698416826913226b4895d0

Red Hat Enterprise Linux Desktop 5

SRPM
ruby-1.8.5-5.el5_1.1.src.rpm	SHA-256: 2d6a73d7632477802798241063a19b2caacab4adfd9dfd3857977152b918d3d2
x86_64
ruby-1.8.5-5.el5_1.1.x86_64.rpm	SHA-256: 1b183b49e868c0b9fe46360b893d95c6e1218eb4f5b1baaf9706dfff889c1003
ruby-docs-1.8.5-5.el5_1.1.x86_64.rpm	SHA-256: 64bb1dbd5b3bfe01f3d2a79a654a7d51a98045071de35632f0e3d0f00f1d4932
ruby-irb-1.8.5-5.el5_1.1.x86_64.rpm	SHA-256: fdc8ba4074db667e3ed84bafd355c3a8fc1f6a408904ef28917f8ddcacf8ccf8
ruby-libs-1.8.5-5.el5_1.1.i386.rpm	SHA-256: a30773093cfa2423db37a4c803b7435f11318e1703d66216244ffab051de55d0
ruby-libs-1.8.5-5.el5_1.1.x86_64.rpm	SHA-256: cb1eb727aec405c2e19731699f831c7a8b0d070ff3f5f3e7215ca50589bc2e06
ruby-rdoc-1.8.5-5.el5_1.1.x86_64.rpm	SHA-256: ee371308b8d5b2611355f6a6db98cd8737d838be4f7c62cf971878693a7f1409
ruby-ri-1.8.5-5.el5_1.1.x86_64.rpm	SHA-256: 19945e48d50d1f92165312ab60e61b81d681ce47709417e04794a228c0167c05
ruby-tcltk-1.8.5-5.el5_1.1.x86_64.rpm	SHA-256: 10bf171d44607be568691149ea4188f1ad5a1177f62cf13526ea10c633e70746
i386
ruby-1.8.5-5.el5_1.1.i386.rpm	SHA-256: 2183204d84f26aebc93b84e2c32d7d14ec8b8a5e628ffb013203a8fd296e96c0
ruby-docs-1.8.5-5.el5_1.1.i386.rpm	SHA-256: 4c57389131a4e84a7f52a4a0cb09b3aa52cb061d1fa5848738d37a14a74a3c30
ruby-irb-1.8.5-5.el5_1.1.i386.rpm	SHA-256: 25e9dbe2ff7fccfee7fb78d89f26cb2d5c6310a5d571843e28930eeee9ae100b
ruby-libs-1.8.5-5.el5_1.1.i386.rpm	SHA-256: a30773093cfa2423db37a4c803b7435f11318e1703d66216244ffab051de55d0
ruby-rdoc-1.8.5-5.el5_1.1.i386.rpm	SHA-256: 2cdbfba6bb60b479fc18801d3308d726f58e65058f254cc6851561623f50ded2
ruby-ri-1.8.5-5.el5_1.1.i386.rpm	SHA-256: 510789181684eed6d5647d6ee57b5e979215e6956b8c1d557737c03ca0f940fb
ruby-tcltk-1.8.5-5.el5_1.1.i386.rpm	SHA-256: d7bd360e3d131fdd3a42a709089f5caea2e558b8d4698416826913226b4895d0

Red Hat Enterprise Linux for IBM z Systems 5

SRPM
ruby-1.8.5-5.el5_1.1.src.rpm	SHA-256: 2d6a73d7632477802798241063a19b2caacab4adfd9dfd3857977152b918d3d2
s390x
ruby-1.8.5-5.el5_1.1.s390x.rpm	SHA-256: c23f43f71a3ad0615c562a758db4131dfb038ad4b42eb31a2709a7ec4195667b
ruby-devel-1.8.5-5.el5_1.1.s390.rpm	SHA-256: ab73ed7fd27b8e2bdf0fe3e3a1fddae0db4c216ab244ce022644fa8026f1e411
ruby-devel-1.8.5-5.el5_1.1.s390x.rpm	SHA-256: 812ea296aaa23184dc6ac7bf1411615aa264a79169bd0f0abe5b9f2d3fa8697f
ruby-docs-1.8.5-5.el5_1.1.s390x.rpm	SHA-256: 09ec4d6c12a6989db15a780d1f420565f7cd259ec59c95e2f4d9021494b77cde
ruby-irb-1.8.5-5.el5_1.1.s390x.rpm	SHA-256: 3840df7346cee0e72399a863aec7b4f6fd8996a02d19f4bced05a8c6f29c15ec
ruby-libs-1.8.5-5.el5_1.1.s390.rpm	SHA-256: dcdc8ab4e2649c9f8d32cd27d5011c64d49048e56dfbdf4b2280a3c7dd84cc12
ruby-libs-1.8.5-5.el5_1.1.s390x.rpm	SHA-256: a0e52ddd7859bb5d0bce4511bd7b634993a2cc57d0660bf75c631cddbf35daaa
ruby-mode-1.8.5-5.el5_1.1.s390x.rpm	SHA-256: 5fd42a2af20ce7c80ffa9a8164ef55df3c0aa2356e571d5aeca8997b11328bfa
ruby-rdoc-1.8.5-5.el5_1.1.s390x.rpm	SHA-256: 8ec8b391cfdfc22336a2b0eb25d9de9bcf4eea228a874ba8f93e12ad26c9feb7
ruby-ri-1.8.5-5.el5_1.1.s390x.rpm	SHA-256: 130eb55bc88652e09fb86927cf743893513f1aaed291654ca4a502802121ce68
ruby-tcltk-1.8.5-5.el5_1.1.s390x.rpm	SHA-256: f1662bf1786e926a272d5a0315032b9462251fbe4c2a75304242236418766f65

Red Hat Enterprise Linux for Power, big endian 5

SRPM
ruby-1.8.5-5.el5_1.1.src.rpm	SHA-256: 2d6a73d7632477802798241063a19b2caacab4adfd9dfd3857977152b918d3d2
ppc
ruby-1.8.5-5.el5_1.1.ppc.rpm	SHA-256: cf2b720585b0b56babc3cc832645c913049102b6ed015fdcd9373852e381ae3a
ruby-devel-1.8.5-5.el5_1.1.ppc.rpm	SHA-256: e147b01a5819316a1801885d703543e1543c7be3f3e18f17459e004be290ecfb
ruby-devel-1.8.5-5.el5_1.1.ppc64.rpm	SHA-256: 80213b13facc71c997b4b207de1980c60b3208348036678c64d8edc64300dafc
ruby-docs-1.8.5-5.el5_1.1.ppc.rpm	SHA-256: 17916ae9af293961ff9c00affd336e32f72c7b89efc08a3c64db8f72f1e84007
ruby-irb-1.8.5-5.el5_1.1.ppc.rpm	SHA-256: 7f8c67764fa7ae3d1cc9b6ef5c1fb77f97d386207624dbd29ae9d47923a29151
ruby-libs-1.8.5-5.el5_1.1.ppc.rpm	SHA-256: acacdf2485271bf0af27a969ae5add1ac5fb8f843903014346a99e5904c1bfcb
ruby-libs-1.8.5-5.el5_1.1.ppc64.rpm	SHA-256: 10dea81ad74ce609faea8ad2caa698672331d8972f61fc6bd0240b27043f133e
ruby-mode-1.8.5-5.el5_1.1.ppc.rpm	SHA-256: d5350fd249448bdb3d1f6a08d12bbdcce28d1a00c287323edcd53590788ce009
ruby-rdoc-1.8.5-5.el5_1.1.ppc.rpm	SHA-256: bcccfd08faf50e8c2661e05605d1692fa07ab900bd5d80b6ab92f86eb4218b36
ruby-ri-1.8.5-5.el5_1.1.ppc.rpm	SHA-256: 794b1986c0bcdd27f54dca32e9a43e7436c729cedadd03bf34e5705eec66774e
ruby-tcltk-1.8.5-5.el5_1.1.ppc.rpm	SHA-256: 2e2d4dfcffd9f7379da99fb8d3c36d652636c8cc0026e25f5629010daff1dee0

Red Hat Enterprise Linux Server from RHUI 5

SRPM
ruby-1.8.5-5.el5_1.1.src.rpm	SHA-256: 2d6a73d7632477802798241063a19b2caacab4adfd9dfd3857977152b918d3d2
x86_64
ruby-1.8.5-5.el5_1.1.x86_64.rpm	SHA-256: 1b183b49e868c0b9fe46360b893d95c6e1218eb4f5b1baaf9706dfff889c1003
ruby-devel-1.8.5-5.el5_1.1.i386.rpm	SHA-256: e76d6cff4ca7a0e5e87b300af326b13b9ecec6675e6798d5aedee70799350877
ruby-devel-1.8.5-5.el5_1.1.x86_64.rpm	SHA-256: 96ee44681e8d9e257ac0afdb8a3c636bc86db599ffde159877b2b2ac302bd3d1
ruby-docs-1.8.5-5.el5_1.1.x86_64.rpm	SHA-256: 64bb1dbd5b3bfe01f3d2a79a654a7d51a98045071de35632f0e3d0f00f1d4932
ruby-irb-1.8.5-5.el5_1.1.x86_64.rpm	SHA-256: fdc8ba4074db667e3ed84bafd355c3a8fc1f6a408904ef28917f8ddcacf8ccf8
ruby-libs-1.8.5-5.el5_1.1.i386.rpm	SHA-256: a30773093cfa2423db37a4c803b7435f11318e1703d66216244ffab051de55d0
ruby-libs-1.8.5-5.el5_1.1.x86_64.rpm	SHA-256: cb1eb727aec405c2e19731699f831c7a8b0d070ff3f5f3e7215ca50589bc2e06
ruby-mode-1.8.5-5.el5_1.1.x86_64.rpm	SHA-256: 23b98b159b075829335b38bff3665fd3ab6bd189733184c270d6aaea3550e944
ruby-rdoc-1.8.5-5.el5_1.1.x86_64.rpm	SHA-256: ee371308b8d5b2611355f6a6db98cd8737d838be4f7c62cf971878693a7f1409
ruby-ri-1.8.5-5.el5_1.1.x86_64.rpm	SHA-256: 19945e48d50d1f92165312ab60e61b81d681ce47709417e04794a228c0167c05
ruby-tcltk-1.8.5-5.el5_1.1.x86_64.rpm	SHA-256: 10bf171d44607be568691149ea4188f1ad5a1177f62cf13526ea10c633e70746
i386
ruby-1.8.5-5.el5_1.1.i386.rpm	SHA-256: 2183204d84f26aebc93b84e2c32d7d14ec8b8a5e628ffb013203a8fd296e96c0
ruby-devel-1.8.5-5.el5_1.1.i386.rpm	SHA-256: e76d6cff4ca7a0e5e87b300af326b13b9ecec6675e6798d5aedee70799350877
ruby-docs-1.8.5-5.el5_1.1.i386.rpm	SHA-256: 4c57389131a4e84a7f52a4a0cb09b3aa52cb061d1fa5848738d37a14a74a3c30
ruby-irb-1.8.5-5.el5_1.1.i386.rpm	SHA-256: 25e9dbe2ff7fccfee7fb78d89f26cb2d5c6310a5d571843e28930eeee9ae100b
ruby-libs-1.8.5-5.el5_1.1.i386.rpm	SHA-256: a30773093cfa2423db37a4c803b7435f11318e1703d66216244ffab051de55d0
ruby-mode-1.8.5-5.el5_1.1.i386.rpm	SHA-256: 48da3dbf7cddb9c590ea4dbe9c6aea346895bd27c83cdeb002887585ef2c2190
ruby-rdoc-1.8.5-5.el5_1.1.i386.rpm	SHA-256: 2cdbfba6bb60b479fc18801d3308d726f58e65058f254cc6851561623f50ded2
ruby-ri-1.8.5-5.el5_1.1.i386.rpm	SHA-256: 510789181684eed6d5647d6ee57b5e979215e6956b8c1d557737c03ca0f940fb
ruby-tcltk-1.8.5-5.el5_1.1.i386.rpm	SHA-256: d7bd360e3d131fdd3a42a709089f5caea2e558b8d4698416826913226b4895d0