From: Ross Bamford <rossrt@...>
Date: 2006-04-25T17:45:23+09:00
Subject: Re: Blocking Sockets Vulnerability on Ubuntu?

On Mon, 2006-04-24 at 23:27 +0900, Ben Gribaudo wrote: 
> Hi Folks,
> 
> Ubuntu sent out a security announcement re Ruby 1.8 this morning:  
> <http://www.ubuntu.com/usn/usn-273-1> I am trying to find background 
> information on this to aid in analyzing its impact on our Web 
> operations. (We run several Webrick-powered applications behind Apache 
> reverse proxies.)
> 
> Where did Matz. announce this? Looking over list threads recently, I 
> don't see discussion on this (or am I just missing it?). Do you have any 
> information on the significance of this issue and the Ruby community's 
> suggested response to it?

Not sure, but maybe these are relevant:

http://www.ruby-lang.org/cgi-bin/cvsweb.cgi/ruby/lib/webrick/server.rb?sortby=log
http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-dev/26405

It looks like the issue was fixed by 1.8.3-preview2.

-- 
Ross Bamford - rosco@roscopeco.REMOVE.co.uk