MGASA-2013-0297
- Source
- https://advisories.mageia.org/MGASA-2013-0297.html
- Import Source
- https://advisories.mageia.org/MGASA-2013-0297.json
- JSON Data
- https://api.osv.dev/v1/vulns/MGASA-2013-0297
- Related
- Published
- 2013-10-09T22:29:35Z
- Modified
- 2013-10-09T22:29:32Z
- Summary
- Updated ruby-RubyGems package fixes security vulnerabilies
- Details
-
Updated ruby-RubyGems package fixes security vulnerability:
RubyGems validates versions with a regular expression that is vulnerable to denial of service due to a backtracking regular expression. For specially crafted RubyGems versions attackers can cause denial of service through CPU consumption (CVE-2013-4287, CVE-2013-4363).
- References
-
- https://advisories.mageia.org/MGASA-2013-0297.html
- https://bugs.mageia.org/show_bug.cgi?id=11276
- http://blog.rubygems.org/2013/09/09/CVE-2013-4287.html
- http://blog.rubygems.org/2013/09/24/CVE-2013-4363.html
- https://lists.fedoraproject.org/pipermail/package-announce/2013-September/115886.html
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4287
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:3 / ruby-RubyGems
Package
- Name
- ruby-RubyGems
- Purl
- pkg:rpm/mageia/ruby-RubyGems?arch=source&distro=mageia-3