Oval Definition:oval:com.redhat.rhsa:def:20141911
Revision Date:2014-11-26Version:635
Title:RHSA-2014:1911: ruby security update (Moderate)
Description:Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

  • Multiple denial of service flaws were found in the way the Ruby REXML XML parser performed expansion of parameter entities. A specially crafted XML document could cause REXML to use an excessive amount of CPU and memory. (CVE-2014-8080, CVE-2014-8090)

    The CVE-2014-8090 issue was discovered by Red Hat Product Security.

    All ruby users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. All running instances of Ruby need to be restarted for this update to take effect.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2014-8080
    CVE-2014-8090
    RHSA-2014:1911
    RHSA-2014:1911-00
    RHSA-2014:1911-02
    Platform(s):Red Hat Enterprise Linux 6
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 6 is installed
  • AND
  • ruby is earlier than 0:1.8.7.374-3.el6_6
  • AND ruby is signed with Red Hat redhatrelease2 key
  • ruby-devel is earlier than 0:1.8.7.374-3.el6_6
  • AND ruby-devel is signed with Red Hat redhatrelease2 key
  • ruby-docs is earlier than 0:1.8.7.374-3.el6_6
  • AND ruby-docs is signed with Red Hat redhatrelease2 key
  • ruby-irb is earlier than 0:1.8.7.374-3.el6_6
  • AND ruby-irb is signed with Red Hat redhatrelease2 key
  • ruby-libs is earlier than 0:1.8.7.374-3.el6_6
  • AND ruby-libs is signed with Red Hat redhatrelease2 key
  • ruby-rdoc is earlier than 0:1.8.7.374-3.el6_6
  • AND ruby-rdoc is signed with Red Hat redhatrelease2 key
  • ruby-ri is earlier than 0:1.8.7.374-3.el6_6
  • AND ruby-ri is signed with Red Hat redhatrelease2 key
  • ruby-static is earlier than 0:1.8.7.374-3.el6_6
  • AND ruby-static is signed with Red Hat redhatrelease2 key
  • ruby-tcltk is earlier than 0:1.8.7.374-3.el6_6
  • AND ruby-tcltk is signed with Red Hat redhatrelease2 key
  • BACK