Red Hat Security AdvisoryRHSA-2013:1090
ruby security update
Released 2013-07-17 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) ruby-1.8.5-31.el5_9, ruby-1.8.5-31.el5_9.i386, ruby-1.8.5-31.el5_9.ia64 +33
- Red Hat Enterprise Linux Desktop (v. 6) ruby-1.8.7.352-12.el6_4, ruby-devel-1.8.7.352-12.el6_4, ruby-irb-1.8.7.352-12.el6_4 +2
- Red Hat Enterprise Linux Desktop Optional (v. 6) ruby-1.8.7.352-12.el6_4, ruby-docs-1.8.7.352-12.el6_4, ruby-ri-1.8.7.352-12.el6_4 +2
- Red Hat Enterprise Linux HPC Node (v. 6) ruby-1.8.7.352-12.el6_4, ruby-devel-1.8.7.352-12.el6_4, ruby-irb-1.8.7.352-12.el6_4 +2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) ruby-1.8.7.352-12.el6_4, ruby-docs-1.8.7.352-12.el6_4, ruby-ri-1.8.7.352-12.el6_4 +2
- Red Hat Enterprise Linux Server (v. 6) ruby-1.8.7.352-12.el6_4, ruby-devel-1.8.7.352-12.el6_4, ruby-devel-1.8.7.352-12.el6_4.ppc +4
- Red Hat Enterprise Linux Server Optional (v. 6) ruby-1.8.7.352-12.el6_4, ruby-docs-1.8.7.352-12.el6_4, ruby-ri-1.8.7.352-12.el6_4 +2
- Red Hat Enterprise Linux Workstation (v. 6) ruby-1.8.7.352-12.el6_4, ruby-devel-1.8.7.352-12.el6_4, ruby-irb-1.8.7.352-12.el6_4 +2
- Red Hat Enterprise Linux Workstation Optional (v. 6) ruby-1.8.7.352-12.el6_4, ruby-docs-1.8.7.352-12.el6_4, ruby-ri-1.8.7.352-12.el6_4 +2
Fixes 1 record
Priority LOW 35
The OpenSSL::SSL.verify_certificate_identity function in lib/openssl/ssl.rb in Ruby 1.8 before 1.8.7-p374, 1.9 before 1.9.3-p448, and 2.0 before 2.0.0-p247 does not properly handle a '\0' character in a domain name in th…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.02757 · Published 2013-08-18 · Partial fix CWE-310
