|
Yukihiro Matsumoto Ruby CGI Session Management Insecure File Permissions Vulnerability
Solution: The current 1.6 version of Ruby and versions 1.8.1 and 1.8.2 pre1 and 1.8.2 pre2 are not affected by this issue. This information is not confirmed at the moment. Red Hat has released an advisory (FEDORA-2004-264) to address this issue in Fedora Core 2. Please see the referenced advisory for more information. Red Hat has released advisory RHSA-2004:441-18 and fixes to address this issue on Red Hat Linux Enterprise platforms. Customers that are affected by this issue are advised to apply the appropriate updates. Customers subscribed to the Red Hat Network may apply the appropriate fixes using the Red Hat Update Agent (up2date). Please see referenced advisory for additional information. Debian has released an advisory to address this issue. Please see the referenced advisory for more information. Gentoo has released an advisory (GLSA 200409-08) and an updated eBuild to address this issue. Please see the referenced advisory to more information. Gentoo users can carry out the following commands to update their computers: emerge sync emerge -pv ">=dev-lang/ruby-your_version" emerge ">=dev-lang/ruby-your_version" Mandrake has released advisory MDKSA-2004:128 along with fixes to address this issue. Please see the referenced advisory for further information. RedHat Fedora Linux has released advisory FEDORA-2004-403 along with fixes for their Fedora Core 3 product. Please see the referenced advisory for more information. Turbolinux has released advisory Turbolinux Security Announcement 31/Jan/2005 to address various issues. Please see the referenced advisory for more information. The Fedora Legacy project has released advisory FLSA:152768 to address this issue in RedHat Linux 7.3, 9, and Fedora Core 1. Please see the referenced advisory for further information. Yukihiro Matsumoto Ruby 1.6
Yukihiro Matsumoto Ruby 1.8
Turbolinux Turbolinux Desktop 10.0
Turbolinux Turbolinux Server 10.0
Turbolinux Turbolinux Server 7.0
Turbolinux Turbolinux Workstation 7.0
Turbolinux Turbolinux Workstation 8.0
Turbolinux Turbolinux Server 8.0
|
|
 Privacy Statement |
