What is RHSA-2014:1914?

RHSA-2014:1914 is a security advisory published by Red Hat Product Security with Medium severity. Red Hat Security Advisory: ruby200-ruby security update

Which CVE IDs does RHSA-2014:1914 cover?

RHSA-2014:1914 covers the following CVE IDs: CVE-2014-4975, CVE-2014-8080, CVE-2014-8090. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by RHSA-2014:1914?

RHSA-2014:1914 affects 126 products, including: Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6); Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 7); Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4); Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.5); Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.6); and others — see the full list on the advisory page.

RHSA-2014:1914Medium

Red Hat Security Advisory: ruby200-ruby security update

Vendor

Red Hat Product Security

Published

November 26, 2014

Last Modified

November 7, 2026

🔗 CVE IDs covered (3)

CVE-2014-4975 →CVE-2014-8080 →CVE-2014-8090 →

📋 Description

CVE-2014-4975 — ruby: off-by-one stack-based buffer overflow in the encodes() function CVE-2014-8080 — ruby: REXML billion laughs attack via parameter entity expansion CVE-2014-8090 — ruby: REXML incomplete fix for CVE-2014-8080

🎯 Affected products126

Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6)
Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 7)
Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4)
Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.5)
Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.6)
Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6)
Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 7)
ruby200-ruby-0:2.0.0.353-24.el6.src as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6)
ruby200-ruby-0:2.0.0.353-24.el6.src as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4)
ruby200-ruby-0:2.0.0.353-24.el6.src as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.5)
ruby200-ruby-0:2.0.0.353-24.el6.src as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.6)
ruby200-ruby-0:2.0.0.353-24.el6.src as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6)
ruby200-ruby-0:2.0.0.353-24.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6)
ruby200-ruby-0:2.0.0.353-24.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4)
ruby200-ruby-0:2.0.0.353-24.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.5)
ruby200-ruby-0:2.0.0.353-24.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.6)
ruby200-ruby-0:2.0.0.353-24.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6)
ruby200-ruby-0:2.0.0.353-24.el7.src as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 7)
ruby200-ruby-0:2.0.0.353-24.el7.src as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 7)
ruby200-ruby-0:2.0.0.353-24.el7.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 7)
ruby200-ruby-0:2.0.0.353-24.el7.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 7)
ruby200-ruby-debuginfo-0:2.0.0.353-24.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6)
ruby200-ruby-debuginfo-0:2.0.0.353-24.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4)
ruby200-ruby-debuginfo-0:2.0.0.353-24.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.5)
ruby200-ruby-debuginfo-0:2.0.0.353-24.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.6)
ruby200-ruby-debuginfo-0:2.0.0.353-24.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6)
ruby200-ruby-debuginfo-0:2.0.0.353-24.el7.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 7)
ruby200-ruby-debuginfo-0:2.0.0.353-24.el7.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 7)
ruby200-ruby-devel-0:2.0.0.353-24.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6)
ruby200-ruby-devel-0:2.0.0.353-24.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4)
+96 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258

🔗 CVE IDs covered (3)

📋 Description

🎯 Affected products126

✅ Remediation

🔗 References (6)