Red Hat Security Advisory

RHSA-2014:0207

rubygems security update

Released 2014-02-24 · Red Hat rating Moderate · View on Red Hat →

Fixed in

RHOSE Client 2.0 rubygems-1.8.24-5.el6op, rubygems-devel-1.8.24-5.el6op
RHOSE Infrastructure 2.0 rubygems-1.8.24-5.el6op, rubygems-devel-1.8.24-5.el6op
RHOSE Node 2.0 rubygems-1.8.24-5.el6op, rubygems-devel-1.8.24-5.el6op

Fixes 1 record

TI-2013-03753 CVE-2013-4287 · GHSA-9j7m-rjqx-48vh

Algorithmic complexity vulnerability in Gem::Version::VERSION_PATTERN in…

LOW 26

Algorithmic complexity vulnerability in Gem::Version::VERSION_PATTERN in lib/rubygems/version.rb in RubyGems before 1.8.23.1, 1.8.24 through 1.8.25, 2.0.x before 2.0.8, and 2.1.x before 2.1.0, as used in Ruby 1.9.0 throu…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03331 Published 2013-10-17 Partial fix · 1.8.23.1, 1.8.26 +2 CWE-310