Red Hat Security Advisory

RHSA-2013:0611

ruby security update

Released 2013-03-07 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) ruby-1.8.5-29.el5_9, ruby-1.8.5-29.el5_9.i386, ruby-1.8.5-29.el5_9.ia64 +33

Fixes 1 record

TI-2013-01606 CVE-2013-1821 · GHSA-hgg7-cghq-xhf4

lib/rexml/text.rb in the REXML parser in Ruby before 1.9.3-p392 allows remote attackers…

LOW 33

lib/rexml/text.rb in the REXML parser in Ruby before 1.9.3-p392 allows remote attackers to cause a denial of service (memory consumption and crash) via crafted text nodes in an XML document, aka an XML Entity Expansion (…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.06857 Published 2013-04-09 Partial fix · 1.7.3 CWE-20