ELSA-2013-1441

ELSA-2013-1441 - rubygems security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2013-10-17

Description

[1.3.7-4]
- Remove regexp backtracing (CVE-2013-4363).
- Related: rhbz#1002838.

[1.3.7-3]
- Fix insecure connection to SSL repository (CVE-2012-2125, CVE-2012-2126).
- Related: rhbz#1002838.

[1.3.7-2]
- Fix algorithmic complexity vulnerability (CVE-2013-4287).
- Resolves: rhbz#1002838.

Related CVEs

CVE-2012-2126

CVE-2012-2125

CVE-2013-4287

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (i386)	rubygems-1.3.7-4.el6_4.src.rpm	770d4ab9c319c2f67d2d9018f2cb78c71d07ef0970e30198b0d809851fe960f9	ELBA-2013-1694	ol6_i386_latest_archive
	rubygems-1.3.7-4.el6_4.src.rpm	770d4ab9c319c2f67d2d9018f2cb78c71d07ef0970e30198b0d809851fe960f9	ELBA-2013-1694	ol6_u4_i386_patch
	rubygems-1.3.7-4.el6_4.src.rpm	770d4ab9c319c2f67d2d9018f2cb78c71d07ef0970e30198b0d809851fe960f9	ELBA-2013-1694	ol6_u5_i386_base
	rubygems-1.3.7-4.el6_4.noarch.rpm	79c8652ff358a576ea03f4489970ec50cb1660aff1b93cf13574b2b5732af146	ELBA-2013-1694	ol6_i386_latest_archive
	rubygems-1.3.7-4.el6_4.noarch.rpm	79c8652ff358a576ea03f4489970ec50cb1660aff1b93cf13574b2b5732af146	ELBA-2013-1694	ol6_u4_i386_patch
	rubygems-1.3.7-4.el6_4.noarch.rpm	79c8652ff358a576ea03f4489970ec50cb1660aff1b93cf13574b2b5732af146	ELBA-2013-1694	ol6_u5_i386_base
Oracle Linux 6 (x86_64)	rubygems-1.3.7-4.el6_4.src.rpm	770d4ab9c319c2f67d2d9018f2cb78c71d07ef0970e30198b0d809851fe960f9	ELBA-2013-1694	ol6_u4_x86_64_patch
	rubygems-1.3.7-4.el6_4.src.rpm	770d4ab9c319c2f67d2d9018f2cb78c71d07ef0970e30198b0d809851fe960f9	ELBA-2013-1694	ol6_u5_x86_64_base
	rubygems-1.3.7-4.el6_4.src.rpm	770d4ab9c319c2f67d2d9018f2cb78c71d07ef0970e30198b0d809851fe960f9	ELBA-2013-1694	ol6_x86_64_latest_archive
	rubygems-1.3.7-4.el6_4.noarch.rpm	79c8652ff358a576ea03f4489970ec50cb1660aff1b93cf13574b2b5732af146	ELBA-2013-1694	ol6_u4_x86_64_patch
	rubygems-1.3.7-4.el6_4.noarch.rpm	79c8652ff358a576ea03f4489970ec50cb1660aff1b93cf13574b2b5732af146	ELBA-2013-1694	ol6_u5_x86_64_base
	rubygems-1.3.7-4.el6_4.noarch.rpm	79c8652ff358a576ea03f4489970ec50cb1660aff1b93cf13574b2b5732af146	ELBA-2013-1694	ol6_x86_64_latest_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team