ELSA-2014-1911

ELSA-2014-1911 - ruby security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2014-11-26

Description

[1.8.7.374-3]
- Fix REXML billion laughs attack via parameter entity expansion
(CVE-2014-8080).
Resolves: rhbz#1163993
- REXML incomplete fix for CVE-2014-8080 (CVE-2014-8090).
Resolves: rhbz#1163993

Related CVEs

CVE-2014-8080

CVE-2014-8090

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 6 (i386)	ruby-1.8.7.374-3.el6_6.src.rpm	c26b5ef2da5caa806415ea0a2d71a315	ELBA-2017-0647
	ruby-1.8.7.374-3.el6_6.i686.rpm	d160c0dc97d0383d81a873b6829d5507	ELBA-2017-0647
	ruby-devel-1.8.7.374-3.el6_6.i686.rpm	d9f29a736954e9f14a9d2ce7193107bf	ELBA-2017-0647
	ruby-docs-1.8.7.374-3.el6_6.i686.rpm	82dc1b441e101d3459ed2b30bd1d9ee5	ELBA-2017-0647
	ruby-irb-1.8.7.374-3.el6_6.i686.rpm	019c81462ed803fa2cef7cd19edaf520	ELBA-2017-0647
	ruby-libs-1.8.7.374-3.el6_6.i686.rpm	382480d0845d69a5a15804a247ac242a	ELBA-2017-0647
	ruby-rdoc-1.8.7.374-3.el6_6.i686.rpm	23d67bdd7a3adc22f2ce906b092da3d8	ELBA-2017-0647
	ruby-ri-1.8.7.374-3.el6_6.i686.rpm	1e89fde9624217c10efac968d0ae5233	ELBA-2017-0647
	ruby-static-1.8.7.374-3.el6_6.i686.rpm	16c1c9bf397c9d6c6e04a3ea2ffab273	ELBA-2017-0647
	ruby-tcltk-1.8.7.374-3.el6_6.i686.rpm	f76fbe53626e2924769e41a36eea1810	ELBA-2017-0647
Oracle Linux 6 (x86_64)	ruby-1.8.7.374-3.el6_6.src.rpm	c26b5ef2da5caa806415ea0a2d71a315	ELBA-2017-0647
	ruby-1.8.7.374-3.el6_6.x86_64.rpm	e2859e8dfcbff4a7dc0c857109292d9e	ELBA-2017-0647
	ruby-devel-1.8.7.374-3.el6_6.i686.rpm	d9f29a736954e9f14a9d2ce7193107bf	ELBA-2017-0647
	ruby-devel-1.8.7.374-3.el6_6.x86_64.rpm	de344773df2638a3fb64ee5bf0db7106	ELBA-2017-0647
	ruby-docs-1.8.7.374-3.el6_6.x86_64.rpm	07b155545bb888365a516c67b7c56e41	ELBA-2017-0647
	ruby-irb-1.8.7.374-3.el6_6.x86_64.rpm	5da048087a79a9a02915740adf591e53	ELBA-2017-0647
	ruby-libs-1.8.7.374-3.el6_6.i686.rpm	382480d0845d69a5a15804a247ac242a	ELBA-2017-0647
	ruby-libs-1.8.7.374-3.el6_6.x86_64.rpm	090cb21b2fea360a3d734df0eaf8a3b5	ELBA-2017-0647
	ruby-rdoc-1.8.7.374-3.el6_6.x86_64.rpm	20ff4a6614ff66f97bae9768e9e48c25	ELBA-2017-0647
	ruby-ri-1.8.7.374-3.el6_6.x86_64.rpm	e7566bf0bba881bd322088fb04e0c356	ELBA-2017-0647
	ruby-static-1.8.7.374-3.el6_6.x86_64.rpm	cad112b10179fcf4d2ca500740ec3a06	ELBA-2017-0647
	ruby-tcltk-1.8.7.374-3.el6_6.x86_64.rpm	02743e1446aaeae5d28e6b268011c9e3	ELBA-2017-0647

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team