ruby security update

CentOS Errata and Security Advisory CESA-2013:0611

Ruby is an extensible, interpreted, object-oriented, scripting language. It
has features to process text files and to do system management tasks.

It was discovered that Ruby’s REXML library did not properly restrict XML
entity expansion. An attacker could use this flaw to cause a denial of
service by tricking a Ruby application using REXML to read text nodes from
specially-crafted XML content, which will result in REXML consuming large
amounts of system memory. (CVE-2013-1821)

All users of Ruby are advised to upgrade to these updated packages, which
contain backported patches to resolve this issue.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2013-March/081431.html
https://lists.centos.org/pipermail/centos-announce/2013-March/094186.html

Affected packages:
ruby
ruby-devel
ruby-docs
ruby-irb
ruby-libs
ruby-mode
ruby-rdoc
ruby-ri
ruby-tcltk

Upstream details at:
https://access.redhat.com/errata/RHSA-2013:0611