Ruby NewsThe latest news from Ruby-Lang.org.Arbitrary code execution vulnerabilities- June 20, 2008 Multiple vulnerabilities in Ruby may lead to a denial of service (DoS) condition or allow execution of arbitrary code. ImpactWith the following vulnerabilities, an attacker can lead to denial of service condition or execute arbitrary code. CVE-2008-2662 CVE-2008-2663 CVE-2008-2725 CVE-2008-2726 CVE-2008-2664 Vulnerable versions 1.8 series 1.8.4 and all prior versions 1.8.5-p230 and all prior versions 1.8.6-p229 and all prior versions 1.8.7-p21 and all prior versions 1.9 series 1.9.0-1 and.http://www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities/ RubyNation 2008- June 16, 2008 RubyNation is an annual Ruby conference serving the Virginia, West Virginia, Maryland, and Washington, DC areas. This year's RubyNation will happen on August 1&2, 2008 in Herndon, VA. Please visit the RubyNation site for more details.http://www.ruby-lang.org/en/news/2008/06/16/rubynation-2008/ |