Skip to content
OpenAdvisories
Unscored RHSA-2013:0728 1 CVE

Red Hat Security Advisory: rubygem packages security update

Published Sep 15, 2024 · Updated Mar 23, 2026

Ecosystem: Red Hat

Fixed packages 16

ReleasePackageFixed in
Red Hat · OpenShift 1 openshift:1::el6 ruby193-rubygem-activesupport 1:3.2.8-4.el6
Red Hat · OpenShift 1 openshift:1::el6 ruby193-rubygem-bcrypt-ruby 0:3.0.1-7.el6
Red Hat · OpenShift 1 openshift:1::el6 ruby193-rubygem-bcrypt-ruby-debuginfo 0:3.0.1-7.el6
Red Hat · OpenShift 1 openshift:1::el6 ruby193-rubygem-bson 0:1.5.2-6.el6op
Red Hat · OpenShift 1 openshift:1::el6 ruby193-rubygem-chunky_png 0:1.2.6-3.el6op
Red Hat · OpenShift 1 openshift:1::el6 ruby193-rubygem-ci_reporter 0:1.7.2-4.el6op
Red Hat · OpenShift 1 openshift:1::el6 ruby193-rubygem-compass 0:0.12.2-4.el6op
Red Hat · OpenShift 1 openshift:1::el6 ruby193-rubygem-fastthread 0:1.0.7-7.el6op
Red Hat · OpenShift 1 openshift:1::el6 ruby193-rubygem-fastthread-debuginfo 0:1.0.7-7.el6op
Red Hat · OpenShift 1 openshift:1::el6 ruby193-rubygem-haml 0:3.1.7-3.el6op
Red Hat · OpenShift 1 openshift:1::el6 ruby193-rubygem-http_connection 0:1.4.1-7.el6
Red Hat · OpenShift 1 openshift:1::el6 ruby193-rubygem-rack 1:1.4.1-5.el6
Red Hat · OpenShift 1 openshift:1::el6 ruby193-rubygem-rack-test 0:0.6.1-3.el6
Red Hat · OpenShift 1 openshift:1::el6 ruby193-rubygem-rspec 0:2.11.0-2.el6
Red Hat · OpenShift 1 openshift:1::el6 ruby193-rubygem-treetop 0:1.4.10-6.el6
Red Hat · OpenShift 1 openshift:1::el6 ruby193-rubygem-xml-simple 0:1.0.12-10.el6op

Vulnerabilities 1

  • Medium —
    CVE-2013-0256

    RDoc contains XSS vulnerability

    darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL.

    rdoc RubyGems

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=907820
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0728.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-0256
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-0256
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-0256
  • article
    http://www.ruby-lang.org/en/news/2013/02/06/rdoc-xss-cve-2013-0256/