Red Hat Security AdvisoryRHSA-2012:0069
ruby security update
Released 2012-01-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) ruby-1.8.7.352-4.el6_2, ruby-irb-1.8.7.352-4.el6_2, ruby-libs-1.8.7.352-4.el6_2
- Red Hat Enterprise Linux Desktop Optional (v. 6) ruby-1.8.7.352-4.el6_2, ruby-devel-1.8.7.352-4.el6_2, ruby-docs-1.8.7.352-4.el6_2 +4
- Red Hat Enterprise Linux HPC Node (v. 6) ruby-1.8.7.352-4.el6_2, ruby-irb-1.8.7.352-4.el6_2, ruby-libs-1.8.7.352-4.el6_2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) ruby-1.8.7.352-4.el6_2, ruby-devel-1.8.7.352-4.el6_2, ruby-docs-1.8.7.352-4.el6_2 +4
- Red Hat Enterprise Linux Server (v. 6) ruby-1.8.7.352-4.el6_2, ruby-irb-1.8.7.352-4.el6_2, ruby-libs-1.8.7.352-4.el6_2 +1
- Red Hat Enterprise Linux Server Optional (v. 6) ruby-1.8.7.352-4.el6_2, ruby-devel-1.8.7.352-4.el6_2, ruby-devel-1.8.7.352-4.el6_2.ppc +5
- Red Hat Enterprise Linux Workstation (v. 6) ruby-1.8.7.352-4.el6_2, ruby-irb-1.8.7.352-4.el6_2, ruby-libs-1.8.7.352-4.el6_2
- Red Hat Enterprise Linux Workstation Optional (v. 6) ruby-1.8.7.352-4.el6_2, ruby-devel-1.8.7.352-4.el6_2, ruby-docs-1.8.7.352-4.el6_2 +4
Fixes 1 record
Priority MEDIUM 41
Ruby (aka CRuby) before 1.8.7-p357 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.04059 · Published 2011-12-30 · Fixed CWE-20
