| Summary: | include ruby patch to resolve buffer overflow | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 5 | Reporter: | Rob Millner <rmillner> | ||||||
| Component: | ruby | Assignee: | Vít Ondruch <vondruch> | ||||||
| Status: | CLOSED WORKSFORME | QA Contact: | BaseOS QE - Apps <qe-baseos-apps> | ||||||
| Severity: | medium | Docs Contact: | |||||||
| Priority: | medium | ||||||||
| Version: | 5.7 | CC: | bill-bugzilla.redhat.com, mfisher, psplicha, reiber, wcooley, wnefal+redhatbugzilla | ||||||
| Target Milestone: | rc | Keywords: | EasyFix, Patch | ||||||
| Target Release: | --- | ||||||||
| Hardware: | All | ||||||||
| OS: | Linux | ||||||||
| Whiteboard: | |||||||||
| Fixed In Version: | Doc Type: | Bug Fix | |||||||
| Doc Text: | Story Points: | --- | |||||||
| Clone Of: | Environment: | ||||||||
| Last Closed: | 2012-06-13 18:18:30 UTC | Type: | --- | ||||||
| Regression: | --- | Mount Type: | --- | ||||||
| Documentation: | --- | CRM: | |||||||
| Verified Versions: | Category: | --- | |||||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||||
| Bug Depends On: | |||||||||
| Bug Blocks: | 773704, 834381 | ||||||||
| Attachments: |
|
||||||||
|
Description
Rob Millner
2012-01-30 19:03:05 UTC
Created attachment 558424 [details]
Ruby commit 65e137a
The whole patch. Cangelog diff doesn't apply cleanly to ruby-1.8.5-19.el5_6.1 but the code itself does.
Thank you for reporting. The patch seems feasible and solves OpenShift issues with installing gems. This request was evaluated by Red Hat Product Management for inclusion in the current release of Red Hat Enterprise Linux. Because the affected component is not scheduled to be updated in the current release, Red Hat is unfortunately unable to address this request at this time. Red Hat invites you to ask your support representative to propose this request, if appropriate and relevant, in the next release of Red Hat Enterprise Linux. Somewhere along the way we were able to work around this issue. Closing. Thanks! Looking at bug 773704 , this was worked around for openshift, but all other ruby gems installs are still broken (at least the half dozen I tried). ruby-1.8.5-24.el5 rubygems-1.3.1-1.el5 # gem install fpm *** buffer overflow detected ***: /usr/bin/ruby terminated ======= Backtrace: ========= /lib/i686/nosegneg/libc.so.6(__chk_fail+0x41)[0x547ba1] /usr/lib/ruby/1.8/i386-linux/syck.so(rb_syck_mktime+0x501)[0xd926a1] /usr/lib/ruby/1.8/i386-linux/syck.so(yaml_org_handler+0x838)[0xd92fb8] /usr/lib/ruby/1.8/i386-linux/syck.so(syck_defaultresolver_node_import+0x3f)[0xd9331f] /usr/lib/libruby.so.1.8[0x1b7e2a] /usr/lib/libruby.so.1.8[0x1bf55b] /usr/lib/libruby.so.1.8[0x1c0278] /usr/lib/libruby.so.1.8[0x1c0832] /usr/lib/libruby.so.1.8(rb_funcall+0x20)[0x1c09c0] /usr/lib/ruby/1.8/i386-linux/syck.so(rb_syck_load_handler+0x69)[0xd920c9] (In reply to comment #12) > Looking at bug 773704 , this was worked around for openshift, but all other > ruby gems installs are still broken (at least the half dozen I tried). Hi Bill, The fix is scheduled for next Red Hat Enterprise Linux 5 release. Stay tuned. Thanks, Vít! Greetings Vít,
You wrote:
> The fix is scheduled for next Red Hat Enterprise Linux 5 release. Stay tuned.
The problem still appears to exist in ruby-1.8.5-19.el5_6.1.x86_64
Can you confirm if a fix was applied to that version, or if possibly a fix is still in the works for a future version?
Thank you so much!
-Paul
(In reply to comment #15) Hello Paul, You version of Ruby is quite old indeed. The most recent version of Ruby available in Red Hat Enterprise Linux 5 is ruby-1.8.5-27.el5.x86_64.rpm covered by this [1] errata. Please update to this version. Thank you. [1] http://rhn.redhat.com/errata/RHSA-2013-0129.html |