Red Hat Security AdvisoryRHSA-2013:1764
ruby security update
Released 2013-11-25 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) ruby-1.8.7.352-13.el6, ruby-devel-1.8.7.352-13.el6, ruby-irb-1.8.7.352-13.el6 +2
- Red Hat Enterprise Linux Desktop Optional (v. 6) ruby-1.8.7.352-13.el6, ruby-docs-1.8.7.352-13.el6, ruby-ri-1.8.7.352-13.el6 +2
- Red Hat Enterprise Linux HPC Node (v. 6) ruby-1.8.7.352-13.el6, ruby-devel-1.8.7.352-13.el6, ruby-irb-1.8.7.352-13.el6 +2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) ruby-1.8.7.352-13.el6, ruby-docs-1.8.7.352-13.el6, ruby-ri-1.8.7.352-13.el6 +2
- Red Hat Enterprise Linux Server (v. 6) ruby-1.8.7.352-13.el6, ruby-devel-1.8.7.352-13.el6, ruby-devel-1.8.7.352-13.el6.ppc +4
- Red Hat Enterprise Linux Server Optional (v. 6) ruby-1.8.7.352-13.el6, ruby-docs-1.8.7.352-13.el6, ruby-ri-1.8.7.352-13.el6 +2
- Red Hat Enterprise Linux Workstation (v. 6) ruby-1.8.7.352-13.el6, ruby-devel-1.8.7.352-13.el6, ruby-irb-1.8.7.352-13.el6 +2
- Red Hat Enterprise Linux Workstation Optional (v. 6) ruby-1.8.7.352-13.el6, ruby-docs-1.8.7.352-13.el6, ruby-ri-1.8.7.352-13.el6 +2
Fixes 1 record
Priority MEDIUM 56
Heap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before 2.0.0-p353, 2.1 before 2.1.0 preview2, and trunk before revision 43780 allows context-dependent attackers to cause a denial of service (segmentati…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.34968 · Published 2013-11-23 · Partial fix CWE-119