RHSA-2014:0207Medium

Red Hat Security Advisory: rubygems security update

Published
February 24, 2014
Last Modified
November 7, 2026

🔗 CVE IDs covered (1)

CVE-2013-4287 →

📋 Description

CVE-2013-4287 — rubygems: version regex algorithmic complexity vulnerability

🎯 Affected products12

  • RHOSE Client 2.0
  • RHOSE Infrastructure 2.0
  • RHOSE Node 2.0
  • rubygems-0:1.8.24-5.el6op.noarch as a component of RHOSE Client 2.0
  • rubygems-0:1.8.24-5.el6op.noarch as a component of RHOSE Infrastructure 2.0
  • rubygems-0:1.8.24-5.el6op.noarch as a component of RHOSE Node 2.0
  • rubygems-0:1.8.24-5.el6op.src as a component of RHOSE Client 2.0
  • rubygems-0:1.8.24-5.el6op.src as a component of RHOSE Infrastructure 2.0
  • rubygems-0:1.8.24-5.el6op.src as a component of RHOSE Node 2.0
  • rubygems-devel-0:1.8.24-5.el6op.noarch as a component of RHOSE Client 2.0
  • rubygems-devel-0:1.8.24-5.el6op.noarch as a component of RHOSE Infrastructure 2.0
  • rubygems-devel-0:1.8.24-5.el6op.noarch as a component of RHOSE Node 2.0

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (4)