Lucene search

K
oraclelinuxOracleELSA-2013-1090
HistoryJul 17, 2013 - 12:00 a.m.

ruby security update

2013-07-1700:00:00
Oracle
linux.oracle.com
12

0.001 Low

EPSS

Percentile

49.8%

[1.8.7.352-12]

  • Fix regression introduced by CVE-2013-4073
    https://bugs.ruby-lang.org/issues/8575
    • ruby-2.0.0-p255-Fix-SSL-client-connection-crash-for-SAN-marked-critical.patch
    • Related: rhbz#979300
      [1.8.7.352-11]
  • hostname check bypassing vulnerability in SSL client.
    • ruby-1.8.7-p374-CVE-2013-4073-fix-hostname-verification.patch
    • Resolves: rhbz#979300