# Blocking Sockets Vulnerability on Ubuntu?

**URL:** <https://www.ruby-forum.com/t/blocking-sockets-vulnerability-on-ubuntu/58659>\
**Category:** Ruby\
**Created:** [April 24, 2006, 4:29pm UTC](https://www.ruby-forum.com/t/blocking-sockets-vulnerability-on-ubuntu/58659 "2006-04-24T16:29:13Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ben\_Gribaudo](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/b/6a8cbe/32.png) [@Ben\_Gribaudo](https://www.ruby-forum.com/u/Ben_Gribaudo)\
**Post date:** [April 24, 2006, 4:29pm UTC](https://www.ruby-forum.com/t/blocking-sockets-vulnerability-on-ubuntu/58659/1 "2006-04-24T16:29:13Z")

</div>

Hi Folks,

Ubuntu sent out a security announcement re Ruby 1.8 this morning:  
[http://www.ubuntu.com/usn/usn-273-1](http://www.ubuntu.com/usn/usn-273-1) I am trying to find background  
information on this to aid in analyzing its impact on our Web  
operations. (We run several Webrick-powered applications behind Apache  
reverse proxies.)

Where did Matz. announce this? Looking over list threads recently, I  
don’t see discussion on this (or am I just missing it?). Do you have any  
information on the significance of this issue and the Ruby community’s  
suggested response to it?

Thank you,  
Ben

---

<div class="post-metadata">

**Author:** ![Ben\_Gribaudo](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/b/6a8cbe/32.png) [@Ben\_Gribaudo](https://www.ruby-forum.com/u/Ben_Gribaudo)\
**Post date:** [April 25, 2006, 10:47am UTC](https://www.ruby-forum.com/t/blocking-sockets-vulnerability-on-ubuntu/58659/2 "2006-04-25T10:47:58Z")

</div>

On Mon, 2006-04-24 at 23:27 +0900, Ben Gribaudo wrote:

> information on the significance of this issue and the Ruby community’s  
> suggested response to it?

Not sure, but maybe these are relevant:

[http://www.ruby-lang.org/cgi-bin/cvsweb.cgi/ruby/lib/webrick/server.rb?sortby=log](http://www.ruby-lang.org/cgi-bin/cvsweb.cgi/ruby/lib/webrick/server.rb?sortby=log)  
[http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-dev/26405](http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-dev/26405)

It looks like the issue was fixed by 1.8.3-preview2.

---

<div class="post-metadata">

**Author:** ![Ben\_Gribaudo](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/b/6a8cbe/32.png) [@Ben\_Gribaudo](https://www.ruby-forum.com/u/Ben_Gribaudo)\
**Post date:** [April 25, 2006, 5:31pm UTC](https://www.ruby-forum.com/t/blocking-sockets-vulnerability-on-ubuntu/58659/3 "2006-04-25T17:31:19Z")

</div>

Ross B. wrote:

> Not sure, but maybe these are relevant:
> 
> [http://www.ruby-lang.org/cgi-bin/cvsweb.cgi/ruby/lib/webrick/server.rb?sortby=log](http://www.ruby-lang.org/cgi-bin/cvsweb.cgi/ruby/lib/webrick/server.rb?sortby=log)  
> [http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-dev/26405](http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-dev/26405)
> 
> It looks like the issue was fixed by 1.8.3-preview2.

Thank you! -bdg