Уведомление безопасности DSA-862

Высокая (7.5)

(AV:N/AC:L/Au:N/C:P/I:P/A:P)

Debian

irb1.6 (any) libcurses-ruby1.6 (any) libdbm-ruby1.6 (any) libgdbm-ruby1.6 (any) libpty-ruby1.6 (any) libreadline-ruby1.6 (any) libruby1.6 (any) libruby1.6-dbg (any) libsdbm-ruby1.6 (any) libsyslog-ruby1.6 (any) libtcltk-ruby1.6 (any) libtk-ruby1.6 (any) ruby1.6 (any) ruby1.6-dev (any) ruby1.6-elisp (any) ruby1.6-examples (any)

Уведомление безопасности об уязвимостях irb1.6, libpty-ruby1.6, libsyslog-ruby1.6, libruby1.6-dbg, libdbm-ruby1.6, libcurses-ruby1.6, libruby1.6, ruby1.6-dev, ruby1.6-elisp, ruby1.6, libgdbm-ruby1.6, libtcltk-ruby1.6, libtk-ruby1.6, libsdbm-ruby1.6, libreadline-ruby1.6, ruby1.6-examples

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
Debian GNU/Linux 3.1:
ppc:
libcurses-ruby1.6 - 1.6.8-12sarge1
libdbm-ruby1.6 - 1.6.8-12sarge1
libgdbm-ruby1.6 - 1.6.8-12sarge1
libpty-ruby1.6 - 1.6.8-12sarge1
libreadline-ruby1.6 - 1.6.8-12sarge1
libruby1.6 - 1.6.8-12sarge1
libruby1.6-dbg - 1.6.8-12sarge1
libsdbm-ruby1.6 - 1.6.8-12sarge1
libsyslog-ruby1.6 - 1.6.8-12sarge1
libtcltk-ruby1.6 - 1.6.8-12sarge1
libtk-ruby1.6 - 1.6.8-12sarge1
ruby1.6 - 1.6.8-12sarge1
ruby1.6-dev - 1.6.8-12sarge1
s390x:
libcurses-ruby1.6 - 1.6.8-12sarge1
libdbm-ruby1.6 - 1.6.8-12sarge1
libgdbm-ruby1.6 - 1.6.8-12sarge1
libpty-ruby1.6 - 1.6.8-12sarge1
libreadline-ruby1.6 - 1.6.8-12sarge1
libruby1.6 - 1.6.8-12sarge1
libruby1.6-dbg - 1.6.8-12sarge1
libsdbm-ruby1.6 - 1.6.8-12sarge1
libsyslog-ruby1.6 - 1.6.8-12sarge1
libtcltk-ruby1.6 - 1.6.8-12sarge1
libtk-ruby1.6 - 1.6.8-12sarge1
ruby1.6 - 1.6.8-12sarge1
ruby1.6-dev - 1.6.8-12sarge1
m68k:
libcurses-ruby1.6 - 1.6.8-12sarge1
libdbm-ruby1.6 - 1.6.8-12sarge1
libgdbm-ruby1.6 - 1.6.8-12sarge1
libpty-ruby1.6 - 1.6.8-12sarge1
libreadline-ruby1.6 - 1.6.8-12sarge1
libruby1.6 - 1.6.8-12sarge1
libruby1.6-dbg - 1.6.8-12sarge1
libsdbm-ruby1.6 - 1.6.8-12sarge1
libsyslog-ruby1.6 - 1.6.8-12sarge1
libtcltk-ruby1.6 - 1.6.8-12sarge1
libtk-ruby1.6 - 1.6.8-12sarge1
ruby1.6 - 1.6.8-12sarge1
ruby1.6-dev - 1.6.8-12sarge1
i686:
libcurses-ruby1.6 - 1.6.8-12sarge1
libdbm-ruby1.6 - 1.6.8-12sarge1
libgdbm-ruby1.6 - 1.6.8-12sarge1
libpty-ruby1.6 - 1.6.8-12sarge1
libreadline-ruby1.6 - 1.6.8-12sarge1
libruby1.6 - 1.6.8-12sarge1
libruby1.6-dbg - 1.6.8-12sarge1
libsdbm-ruby1.6 - 1.6.8-12sarge1
libsyslog-ruby1.6 - 1.6.8-12sarge1
libtcltk-ruby1.6 - 1.6.8-12sarge1
libtk-ruby1.6 - 1.6.8-12sarge1
ruby1.6 - 1.6.8-12sarge1
ruby1.6-dev - 1.6.8-12sarge1
arm:
libcurses-ruby1.6 - 1.6.8-12sarge1
libdbm-ruby1.6 - 1.6.8-12sarge1
libgdbm-ruby1.6 - 1.6.8-12sarge1
libpty-ruby1.6 - 1.6.8-12sarge1
libreadline-ruby1.6 - 1.6.8-12sarge1
libruby1.6 - 1.6.8-12sarge1
libruby1.6-dbg - 1.6.8-12sarge1
libsdbm-ruby1.6 - 1.6.8-12sarge1
libsyslog-ruby1.6 - 1.6.8-12sarge1
libtcltk-ruby1.6 - 1.6.8-12sarge1
libtk-ruby1.6 - 1.6.8-12sarge1
ruby1.6 - 1.6.8-12sarge1
ruby1.6-dev - 1.6.8-12sarge1
sparc:
libcurses-ruby1.6 - 1.6.8-12sarge1
libdbm-ruby1.6 - 1.6.8-12sarge1
libgdbm-ruby1.6 - 1.6.8-12sarge1
libpty-ruby1.6 - 1.6.8-12sarge1
libreadline-ruby1.6 - 1.6.8-12sarge1
libruby1.6 - 1.6.8-12sarge1
libruby1.6-dbg - 1.6.8-12sarge1
libsdbm-ruby1.6 - 1.6.8-12sarge1
libsyslog-ruby1.6 - 1.6.8-12sarge1
libtcltk-ruby1.6 - 1.6.8-12sarge1
libtk-ruby1.6 - 1.6.8-12sarge1
ruby1.6 - 1.6.8-12sarge1
ruby1.6-dev - 1.6.8-12sarge1
x86-64:
libcurses-ruby1.6 - 1.6.8-12sarge1
libdbm-ruby1.6 - 1.6.8-12sarge1
libgdbm-ruby1.6 - 1.6.8-12sarge1
libpty-ruby1.6 - 1.6.8-12sarge1
libreadline-ruby1.6 - 1.6.8-12sarge1
libruby1.6 - 1.6.8-12sarge1
libruby1.6-dbg - 1.6.8-12sarge1
libsdbm-ruby1.6 - 1.6.8-12sarge1
libsyslog-ruby1.6 - 1.6.8-12sarge1
libtcltk-ruby1.6 - 1.6.8-12sarge1
libtk-ruby1.6 - 1.6.8-12sarge1
ruby1.6 - 1.6.8-12sarge1
ruby1.6-dev - 1.6.8-12sarge1
alpha:
libcurses-ruby1.6 - 1.6.8-12sarge1
libdbm-ruby1.6 - 1.6.8-12sarge1
libgdbm-ruby1.6 - 1.6.8-12sarge1
libpty-ruby1.6 - 1.6.8-12sarge1
libreadline-ruby1.6 - 1.6.8-12sarge1
libruby1.6 - 1.6.8-12sarge1
libruby1.6-dbg - 1.6.8-12sarge1
libsdbm-ruby1.6 - 1.6.8-12sarge1
libsyslog-ruby1.6 - 1.6.8-12sarge1
libtcltk-ruby1.6 - 1.6.8-12sarge1
libtk-ruby1.6 - 1.6.8-12sarge1
ruby1.6 - 1.6.8-12sarge1
ruby1.6-dev - 1.6.8-12sarge1
ia64:
libcurses-ruby1.6 - 1.6.8-12sarge1
libdbm-ruby1.6 - 1.6.8-12sarge1
libgdbm-ruby1.6 - 1.6.8-12sarge1
libpty-ruby1.6 - 1.6.8-12sarge1
libreadline-ruby1.6 - 1.6.8-12sarge1
libruby1.6 - 1.6.8-12sarge1
libruby1.6-dbg - 1.6.8-12sarge1
libsdbm-ruby1.6 - 1.6.8-12sarge1
libsyslog-ruby1.6 - 1.6.8-12sarge1
libtcltk-ruby1.6 - 1.6.8-12sarge1
libtk-ruby1.6 - 1.6.8-12sarge1
ruby1.6 - 1.6.8-12sarge1
ruby1.6-dev - 1.6.8-12sarge1
mips:
libcurses-ruby1.6 - 1.6.8-12sarge1
libdbm-ruby1.6 - 1.6.8-12sarge1
libgdbm-ruby1.6 - 1.6.8-12sarge1
libpty-ruby1.6 - 1.6.8-12sarge1
libreadline-ruby1.6 - 1.6.8-12sarge1
libruby1.6 - 1.6.8-12sarge1
libruby1.6-dbg - 1.6.8-12sarge1
libsdbm-ruby1.6 - 1.6.8-12sarge1
libsyslog-ruby1.6 - 1.6.8-12sarge1
libtcltk-ruby1.6 - 1.6.8-12sarge1
libtk-ruby1.6 - 1.6.8-12sarge1
ruby1.6 - 1.6.8-12sarge1
ruby1.6-dev - 1.6.8-12sarge1
noarch:
irb1.6 - 1.6.8-12sarge1
ruby1.6-elisp - 1.6.8-12sarge1
ruby1.6-examples - 1.6.8-12sarge1
mipsel:
libcurses-ruby1.6 - 1.6.8-12sarge1
libdbm-ruby1.6 - 1.6.8-12sarge1
libgdbm-ruby1.6 - 1.6.8-12sarge1
libpty-ruby1.6 - 1.6.8-12sarge1
libreadline-ruby1.6 - 1.6.8-12sarge1
libruby1.6 - 1.6.8-12sarge1
libruby1.6-dbg - 1.6.8-12sarge1
libsdbm-ruby1.6 - 1.6.8-12sarge1
libsyslog-ruby1.6 - 1.6.8-12sarge1
libtcltk-ruby1.6 - 1.6.8-12sarge1
libtk-ruby1.6 - 1.6.8-12sarge1
ruby1.6 - 1.6.8-12sarge1
ruby1.6-dev - 1.6.8-12sarge1
hppa:
libcurses-ruby1.6 - 1.6.8-12sarge1
libdbm-ruby1.6 - 1.6.8-12sarge1
libgdbm-ruby1.6 - 1.6.8-12sarge1
libpty-ruby1.6 - 1.6.8-12sarge1
libreadline-ruby1.6 - 1.6.8-12sarge1
libruby1.6 - 1.6.8-12sarge1
libruby1.6-dbg - 1.6.8-12sarge1
libsdbm-ruby1.6 - 1.6.8-12sarge1
libsyslog-ruby1.6 - 1.6.8-12sarge1
libtcltk-ruby1.6 - 1.6.8-12sarge1
libtk-ruby1.6 - 1.6.8-12sarge1
ruby1.6 - 1.6.8-12sarge1
ruby1.6-dev - 1.6.8-12sarge1

http://www.debian.org/security/dsa-862/

Источник: CVE
Наименование: CVE-2005-2337
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2337