Red Hat Security AdvisoryRHSA-2013:1767
ruby security update
Released 2013-11-26 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Compute Node EUS (v. 6.2) ruby-1.8.7.352-13.el6_2, ruby-irb-1.8.7.352-13.el6_2, ruby-libs-1.8.7.352-13.el6_2
- Red Hat Enterprise Linux Compute Node EUS (v. 6.3) ruby-1.8.7.352-13.el6_3, ruby-devel-1.8.7.352-13.el6_3, ruby-irb-1.8.7.352-13.el6_3 +2
- Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.2) ruby-1.8.7.352-13.el6_2, ruby-devel-1.8.7.352-13.el6_2, ruby-docs-1.8.7.352-13.el6_2 +4
- Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.3) ruby-1.8.7.352-13.el6_3, ruby-docs-1.8.7.352-13.el6_3, ruby-ri-1.8.7.352-13.el6_3 +2
- Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.4) ruby-1.8.7.352-13.el6_4, ruby-docs-1.8.7.352-13.el6_4, ruby-ri-1.8.7.352-13.el6_4 +2
- Red Hat Enterprise Linux HPC Node EUS (v. 6.4) ruby-1.8.7.352-13.el6_4, ruby-devel-1.8.7.352-13.el6_4, ruby-irb-1.8.7.352-13.el6_4 +2
- Red Hat Enterprise Linux Server EUS (v. 6.2) ruby-1.8.7.352-13.el6_2, ruby-devel-1.8.7.352-13.el6_2, ruby-devel-1.8.7.352-13.el6_2.ppc +4
- Red Hat Enterprise Linux Server EUS (v. 6.3) ruby-1.8.7.352-13.el6_3, ruby-devel-1.8.7.352-13.el6_3, ruby-devel-1.8.7.352-13.el6_3.ppc +4
- Red Hat Enterprise Linux Server EUS (v. 6.4) ruby-1.8.7.352-13.el6_4, ruby-devel-1.8.7.352-13.el6_4, ruby-devel-1.8.7.352-13.el6_4.ppc +4
- Red Hat Enterprise Linux Server Optional EUS (v. 6.2) ruby-1.8.7.352-13.el6_2, ruby-devel-1.8.7.352-13.el6_2, ruby-devel-1.8.7.352-13.el6_2.ppc +5
- Red Hat Enterprise Linux Server Optional EUS (v. 6.3) ruby-1.8.7.352-13.el6_3, ruby-docs-1.8.7.352-13.el6_3, ruby-ri-1.8.7.352-13.el6_3 +2
- Red Hat Enterprise Linux Server Optional EUS (v. 6.4) ruby-1.8.7.352-13.el6_4, ruby-docs-1.8.7.352-13.el6_4, ruby-ri-1.8.7.352-13.el6_4 +2
Fixes 1 record
Priority MEDIUM 56
Heap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before 2.0.0-p353, 2.1 before 2.1.0 preview2, and trunk before revision 43780 allows context-dependent attackers to cause a denial of service (segmentati…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.34968 · Published 2013-11-23 · Partial fix CWE-119
