Ruby: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• Unscored —
  CVE-2014-4975

  Off-by-one error in the encodes function in pack.c in Ruby 1.9.3 and earlier, and 2.x through 2.1.2, when using certain…

  ruby2.0 ruby1.9.1 Ubuntu
  Nov 15, 2014
• Unscored —
  CVE-2014-8080

  The REXML parser in Ruby 1.9.x before 1.9.3-p550, 2.0.x before 2.0.0-p594, and 2.1.x before 2.1.4 allows remote attacke…

  ruby2.0 ruby1.9.1 Ubuntu
  Nov 3, 2014

Revision history

1. 2026-05-07 #14

   Neue Updates von Red Hat aufgenommen

2. 2017-04-20 #13

   New remediations available

3. 2015-02-10 #12

   New remediations available

4. 2015-02-09 #11

   New remediations available

5. 2015-01-29 #9

   New remediations available

6. 2015-01-29 #10

   Version nicht vorhanden

7. 2014-12-09 #6

   New remediations available

8. 2014-12-09 #7

   Version nicht vorhanden

9. 2014-12-09 #8

   Version nicht vorhanden

10. 2014-11-26 #4

    New remediations available

11. 2014-11-26 #5

    Version nicht vorhanden

12. 2014-11-25 #3

    New remediations available

13. 2014-11-05 #1

    Initial Release

14. 2014-11-05 #2

    Version nicht vorhanden

References

• Schwachstelle in Ruby vom 2014-10-27
  https://www.ruby-lang.org/en/news/2014/10/27/rexml-dos-cve-2014-8080/
• Schwachstelle in Ruby vom 2014-07-17
  http://www.openwall.com/lists/oss-security/2014/07/17/4
• Ubuntu Security Notice USN-2397-1 vom 2014-11-04
  http://www.ubuntu.com/usn/usn-2397-1/
• Mandriva Security Advisory MDVSA-2014:225 vom 2014-11-25
  http://www.mandriva.com/de/support/security/advisories/advisory/MDVSA-2014%3A225/
• Red Hat Security Advisory RHSA-2014:1914-1 vom 2014-11-26
  http://rhn.redhat.com/errata/RHSA-2014-1914.html
• Red Hat Security Advisory RHSA-2014:1913-1 vom 2014-11-26
  http://rhn.redhat.com/errata/RHSA-2014-1913.html
• Red Hat Security Advisory RHSA-2014:1912-1 vom 2014-11-26
  http://rhn.redhat.com/errata/RHSA-2014-1912.html
• Red Hat Security Advisory RHSA-2014:1911-1 vom 2014-11-26
  http://rhn.redhat.com/errata/RHSA-2014-1911.html
• CentOS Errata and Security Advisory CESA-2014:1911
  http://lists.centos.org/pipermail/centos-announce/2014-December/020791.html
• CentOS Errata and Security Advisory CESA-2014:1912
  http://lists.centos.org/pipermail/centos-announce/2014-December/020792.html
• SUSE Security Update SUSE-SU-2015:0093-1 vom 2015-01-29
  https://www.suse.com/support/update/announcement/2015/suse-su-20150093-1.html
• SUSE Security Update SUSE-SU-2015:0157-1 vom 2015-01-29
  https://www.suse.com/support/update/announcement/2015/suse-su-20150157-1.html
• Debian Security Advisory DSA-3157-1 vom 2015-02-09
  https://www.debian.org/security/2015/dsa-3157
• Debian Security Advisory DSA-3159-1 vom 2015-02-10
  https://www.debian.org/security/2015/dsa-3159
• SUSE Security Update SUSE-SU-2017:1067-1 vom 2017-04-21
  https://www.suse.com/support/update/announcement/2017/suse-su-20171067-1.html
• Red Hat Security Advisory RHSA-2026:8838 vom 2026-05-08
  https://access.redhat.com/errata/RHSA-2026:8838
• Red Hat Security Advisory RHSA-2026:7307 vom 2026-05-08
  https://access.redhat.com/errata/RHSA-2026:7307
• Red Hat Security Advisory RHSA-2026:7305 vom 2026-05-08
  https://access.redhat.com/errata/RHSA-2026:7305