ruby ruby: update for several security issues ruby: update for several security issues This ruby update improves return value checks for openssl function OCSP_basic_verify() (CVE-2009-0642) which allowed an attacker to use revoked certificates. The entropy of DNS identifiers was increased (CVE-2008-3905) to avaid spoofing attacks. The code for parsing XML data was vulnerable to a denial of service bug (CVE-2008-3790). An attack on algorithm complexity was possible in function WEBrick::HTTP::DefaultFileHandler() while parsing HTTP requests (CVE-2008-3656) as well as by using the regex engine (CVE-2008-3443) causing high CPU load. Ruby's access restriction code (CVE-2008-3655) as well as safe-level handling using function DL.dlopen() (CVE-2008-3657) and big decimal handling (CVE-2009-1904) was improved. Bypassing HTTP basic authentication (authenticate_with_http_digest) is not possible anymore. This ruby update improves return value checks for openssl function OCSP_basic_verify() (CVE-2009-0642) which allowed an attacker to use revoked certificates. The entropy of DNS identifiers was increased (CVE-2008-3905) to avaid spoofing attacks. The code for parsing XML data was vulnerable to a denial of service bug (CVE-2008-3790). An attack on algorithm complexity was possible in function WEBrick::HTTP::DefaultFileHandler() while parsing HTTP requests (CVE-2008-3656) as well as by using the regex engine (CVE-2008-3443) causing high CPU load. Ruby's access restriction code (CVE-2008-3655) as well as safe-level handling using function DL.dlopen() (CVE-2008-3657) and big decimal handling (CVE-2009-1904) was improved. Bypassing HTTP basic authentication (authenticate_with_http_digest) is not possible anymore. security ruby i586 e50981c277e4726a80edef1f8db71d270348ec4b ruby ppc e58e5e041298759854be7401b79e4362839e0f2e ruby x86_64 eb2b9738b8169c860e533aeb86175a4eabbd44b4 ruby-devel i586 826f9195d2f4a6e1b8ac2345383b5336bb785be6 ruby-devel ppc 228fecd93f3417ea4edf75b7a362ca2c1fbc3ecd ruby-devel x86_64 0d061c3bbb7d1355be0220bf34c20d779a012029 ruby-doc-html i586 a656125e8e64ffd5bc8f2349611a6d5816f1be1c ruby-doc-html ppc 94a3d725e1b8c214ff4708f4fd30293d13cd99c1 ruby-doc-html x86_64 05fbdfeeec5f8b46e5d4ec076ca4be5ad2c520ac ruby-doc-ri i586 29e00eb47746c75ed7a849c2880be912c2847f21 ruby-doc-ri ppc 56e0d922e164198936c692c03db989590ce8610d ruby-doc-ri x86_64 c42388e369709e74dbb951ff5241da654db8a176 ruby-examples i586 f176ed2eab97cafd6a4ef3fedb2df4919355de7b ruby-examples ppc 816cfcd88d7a5542991c28e364bcdb0833981b09 ruby-examples x86_64 babb12f565711f023663abf38f06ae22fd2a51a6 ruby-test-suite i586 9617eefa7fd506ff37403bb5fd0046f5b8b24c03 ruby-test-suite ppc 477e7bb0289ab2bece6e3239540e307eaad1fda9 ruby-test-suite x86_64 e0ebf1357fde91dbebbc3658b73252f9b2db6523 ruby-tk i586 217b0002a72a60c412f122220d51048fdea3de7f ruby-tk ppc 925020b8a217411bc8057b14a3ec506415f67b55 ruby-tk x86_64 33bf0b77165d8af41c61d99bf3999043426de4db