Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Red Hat Ruby 1.9.3 Updated to Fix Security Issue
published 2 years ago
Summary
A security issue was found in Ruby 1.9.3 that could allow an attacker to execute arbitrary code on a vulnerable system. This update addresses the issue by updating the Ruby interpreter. Users of Ruby 1.9.3 should update their software to the latest version to ensure they have the fix.
What to do
- Update redhat ruby193-ruby to version 0:1.9.3.484-50.el6.
- Update redhat ruby193-ruby-debuginfo to version 0:1.9.3.484-50.el6.
- Update redhat ruby193-ruby-devel to version 0:1.9.3.484-50.el6.
- Update redhat ruby193-ruby-doc to version 0:1.9.3.484-50.el6.
- Update redhat ruby193-ruby-irb to version 0:1.9.3.484-50.el6.
- Update redhat ruby193-ruby-libs to version 0:1.9.3.484-50.el6.
- Update redhat ruby193-ruby-tcltk to version 0:1.9.3.484-50.el6.
- Update redhat ruby193-rubygem-bigdecimal to version 0:1.1.0-50.el6.
- Update redhat ruby193-rubygem-io-console to version 0:0.3-50.el6.
- Update redhat ruby193-rubygem-json to version 0:1.5.5-50.el6.
- Update redhat ruby193-rubygem-minitest to version 0:2.5.1-50.el6.
- Update redhat ruby193-rubygem-rake to version 0:0.9.2.2-50.el6.
- Update redhat ruby193-rubygem-rdoc to version 0:3.9.5-50.el6.
- Update redhat ruby193-rubygems to version 0:1.8.23-50.el6.
- Update redhat ruby193-rubygems-devel to version 0:1.8.23-50.el6.
- Update redhat ruby193-ruby to version 0:1.9.3.484-50.el7.
- Update redhat ruby193-ruby-debuginfo to version 0:1.9.3.484-50.el7.
- Update redhat ruby193-ruby-devel to version 0:1.9.3.484-50.el7.
- Update redhat ruby193-ruby-doc to version 0:1.9.3.484-50.el7.
- Update redhat ruby193-ruby-irb to version 0:1.9.3.484-50.el7.
- Update redhat ruby193-ruby-libs to version 0:1.9.3.484-50.el7.
- Update redhat ruby193-ruby-tcltk to version 0:1.9.3.484-50.el7.
- Update redhat ruby193-rubygem-bigdecimal to version 0:1.1.0-50.el7.
- Update redhat ruby193-rubygem-io-console to version 0:0.3-50.el7.
- Update redhat ruby193-rubygem-json to version 0:1.5.5-50.el7.
- Update redhat ruby193-rubygem-minitest to version 0:2.5.1-50.el7.
- Update redhat ruby193-rubygem-rake to version 0:0.9.2.2-50.el7.
- Update redhat ruby193-rubygem-rdoc to version 0:3.9.5-50.el7.
- Update redhat ruby193-rubygems to version 0:1.8.23-50.el7.
- Update redhat ruby193-rubygems-devel to version 0:1.8.23-50.el7.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:rhel_software_collections:1::el6 | redhat | ruby193-ruby |
< 0:1.9.3.484-50.el6 Fix: upgrade to 0:1.9.3.484-50.el6
|
| Red Hat:rhel_software_collections:1::el6 | redhat | ruby193-ruby-debuginfo |
< 0:1.9.3.484-50.el6 Fix: upgrade to 0:1.9.3.484-50.el6
|
| Red Hat:rhel_software_collections:1::el6 | redhat | ruby193-ruby-devel |
< 0:1.9.3.484-50.el6 Fix: upgrade to 0:1.9.3.484-50.el6
|
| Red Hat:rhel_software_collections:1::el6 | redhat | ruby193-ruby-doc |
< 0:1.9.3.484-50.el6 Fix: upgrade to 0:1.9.3.484-50.el6
|
| Red Hat:rhel_software_collections:1::el6 | redhat | ruby193-ruby-irb |
< 0:1.9.3.484-50.el6 Fix: upgrade to 0:1.9.3.484-50.el6
|
| Red Hat:rhel_software_collections:1::el6 | redhat | ruby193-ruby-libs |
< 0:1.9.3.484-50.el6 Fix: upgrade to 0:1.9.3.484-50.el6
|
| Red Hat:rhel_software_collections:1::el6 | redhat | ruby193-ruby-tcltk |
< 0:1.9.3.484-50.el6 Fix: upgrade to 0:1.9.3.484-50.el6
|
| Red Hat:rhel_software_collections:1::el6 | redhat | ruby193-rubygem-bigdecimal |
< 0:1.1.0-50.el6 Fix: upgrade to 0:1.1.0-50.el6
|
| Red Hat:rhel_software_collections:1::el6 | redhat | ruby193-rubygem-io-console |
< 0:0.3-50.el6 Fix: upgrade to 0:0.3-50.el6
|
| Red Hat:rhel_software_collections:1::el6 | redhat | ruby193-rubygem-json |
< 0:1.5.5-50.el6 Fix: upgrade to 0:1.5.5-50.el6
|
| Red Hat:rhel_software_collections:1::el6 | redhat | ruby193-rubygem-minitest |
< 0:2.5.1-50.el6 Fix: upgrade to 0:2.5.1-50.el6
|
| Red Hat:rhel_software_collections:1::el6 | redhat | ruby193-rubygem-rake |
< 0:0.9.2.2-50.el6 Fix: upgrade to 0:0.9.2.2-50.el6
|
| Red Hat:rhel_software_collections:1::el6 | redhat | ruby193-rubygem-rdoc |
< 0:3.9.5-50.el6 Fix: upgrade to 0:3.9.5-50.el6
|
| Red Hat:rhel_software_collections:1::el6 | redhat | ruby193-rubygems |
< 0:1.8.23-50.el6 Fix: upgrade to 0:1.8.23-50.el6
|
| Red Hat:rhel_software_collections:1::el6 | redhat | ruby193-rubygems-devel |
< 0:1.8.23-50.el6 Fix: upgrade to 0:1.8.23-50.el6
|
| Red Hat:rhel_software_collections:1::el7 | redhat | ruby193-ruby |
< 0:1.9.3.484-50.el7 Fix: upgrade to 0:1.9.3.484-50.el7
|
| Red Hat:rhel_software_collections:1::el7 | redhat | ruby193-ruby-debuginfo |
< 0:1.9.3.484-50.el7 Fix: upgrade to 0:1.9.3.484-50.el7
|
| Red Hat:rhel_software_collections:1::el7 | redhat | ruby193-ruby-devel |
< 0:1.9.3.484-50.el7 Fix: upgrade to 0:1.9.3.484-50.el7
|
| Red Hat:rhel_software_collections:1::el7 | redhat | ruby193-ruby-doc |
< 0:1.9.3.484-50.el7 Fix: upgrade to 0:1.9.3.484-50.el7
|
| Red Hat:rhel_software_collections:1::el7 | redhat | ruby193-ruby-irb |
< 0:1.9.3.484-50.el7 Fix: upgrade to 0:1.9.3.484-50.el7
|
| Red Hat:rhel_software_collections:1::el7 | redhat | ruby193-ruby-libs |
< 0:1.9.3.484-50.el7 Fix: upgrade to 0:1.9.3.484-50.el7
|
| Red Hat:rhel_software_collections:1::el7 | redhat | ruby193-ruby-tcltk |
< 0:1.9.3.484-50.el7 Fix: upgrade to 0:1.9.3.484-50.el7
|
| Red Hat:rhel_software_collections:1::el7 | redhat | ruby193-rubygem-bigdecimal |
< 0:1.1.0-50.el7 Fix: upgrade to 0:1.1.0-50.el7
|
| Red Hat:rhel_software_collections:1::el7 | redhat | ruby193-rubygem-io-console |
< 0:0.3-50.el7 Fix: upgrade to 0:0.3-50.el7
|
| Red Hat:rhel_software_collections:1::el7 | redhat | ruby193-rubygem-json |
< 0:1.5.5-50.el7 Fix: upgrade to 0:1.5.5-50.el7
|
| Red Hat:rhel_software_collections:1::el7 | redhat | ruby193-rubygem-minitest |
< 0:2.5.1-50.el7 Fix: upgrade to 0:2.5.1-50.el7
|
| Red Hat:rhel_software_collections:1::el7 | redhat | ruby193-rubygem-rake |
< 0:0.9.2.2-50.el7 Fix: upgrade to 0:0.9.2.2-50.el7
|
| Red Hat:rhel_software_collections:1::el7 | redhat | ruby193-rubygem-rdoc |
< 0:3.9.5-50.el7 Fix: upgrade to 0:3.9.5-50.el7
|
| Red Hat:rhel_software_collections:1::el7 | redhat | ruby193-rubygems |
< 0:1.8.23-50.el7 Fix: upgrade to 0:1.8.23-50.el7
|
| Red Hat:rhel_software_collections:1::el7 | redhat | ruby193-rubygems-devel |
< 0:1.8.23-50.el7 Fix: upgrade to 0:1.8.23-50.el7
|
Original advisory text
Red Hat Security Advisory: ruby193-ruby security update
References
- https://access.redhat.com/errata/RHSA-2014:1913 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#moderate Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1118158 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1157709 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1159927 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1913.j... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2014-4975 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2014-4975 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2014-4975 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2014-8080 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2014-8080 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2014-8080 Vendor Advisory
- https://www.ruby-lang.org/en/news/2014/10/27/rexml-dos-cve-2014-8080/ Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2014-8090 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2014-8090 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2014-8090 Vendor Advisory
- https://www.ruby-lang.org/en/news/2014/11/13/rexml-dos-cve-2014-8090/ Third Party Advisory
Timeline
Published13 Sep 2024
Updated15 Apr 2026
First seen15 Apr 2026
Sources
RHSA-2014:1913 · OSV
Track software like this
Free during beta