Ubuntu Update for Linux kernel vulnerabilities USN-691-1

Please Install the Updated Packages.

Laurent Gaffie discovered that Ruby did not properly check for memory allocation failures. If a user or automated system were tricked into running a malicious script, an attacker could cause a denial of service. (CVE-2008-3443) This update also fixes a regression in the upstream patch previously applied to fix CVE-2008-3790. The regression would cause parsing of some XML documents to fail.

ruby1.9 vulnerability on Ubuntu 8.10

• https://lists.ubuntu.com/archives/ubuntu-security-announce/2008-December/000802.html

---

Updated on 2015-03-25