Red Hat Security AdvisoryRHSA-2013:1137
ruby193-ruby security update
Released 2013-08-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHOSE Infrastructure 1.2 ruby193-ruby-1.9.3.448-38.el6, ruby193-ruby-devel-1.9.3.448-38.el6, ruby193-ruby-doc-1.9.3.448-38.el6 +10
- Red Hat OpenShift Enterprise Node ruby193-ruby-1.9.3.448-38.el6, ruby193-ruby-devel-1.9.3.448-38.el6, ruby193-ruby-doc-1.9.3.448-38.el6 +10
Fixes 1 record
Priority LOW 35
The OpenSSL::SSL.verify_certificate_identity function in lib/openssl/ssl.rb in Ruby 1.8 before 1.8.7-p374, 1.9 before 1.9.3-p448, and 2.0 before 2.0.0-p247 does not properly handle a '\0' character in a domain name in th…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.02757 · Published 2013-08-18 · Partial fix CWE-310
