Updated ruby packages fix security vulnerabilities :

Will Wood discovered that Ruby incorrectly handled the encodes() function. An attacker could possibly use this issue to cause Ruby to crash, resulting in a denial of service, or possibly execute arbitrary code. The default compiler options for affected releases should reduce the vulnerability to a denial of service (CVE-2014-4975).

Due to an incomplete fix for CVE-2014-8080, 100% CPU utilization can occur as a result of recursive expansion with an empty String. When reading text nodes from an XML document, the REXML parser in Ruby can be coerced into allocating extremely large string objects which can consume all of the memory on a machine, causing a denial of service (CVE-2014-8090).

Additionally ruby has been upgraded to patch level 374.

This ruby2.1 update to version 2.1.9 fixes the following issues :

Security issues fixed :

  - CVE-2016-2339: heap overflow vulnerability in the     Fiddle::Function.new'initialize' (bsc#1018808)

  - CVE-2015-7551: Unsafe tainted string usage in Fiddle and     DL (bsc#959495)

  - CVE-2015-3900: hostname validation does not work when     fetching gems or making API requests (bsc#936032)

  - CVE-2015-1855: Ruby'a OpenSSL extension suffers a     vulnerability through overly permissive matching of     hostnames (bsc#926974)

  - CVE-2014-4975: off-by-one stack-based buffer overflow in     the encodes() function (bsc#887877)

Bugfixes :

  - SUSEconnect doesn't handle domain wildcards in no_proxy     environment variable properly (bsc#1014863)

  - Segmentation fault after pack & ioctl & unpack     (bsc#909695)

  - Ruby:HTTP Header injection in 'net/http' (bsc#986630)

ChangeLog :

- http://svn.ruby-lang.org/repos/ruby/tags/v2_1_9/ChangeLog

This update was imported from the SUSE:SLE-12:Update update project.

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1913 advisory.

    - Fix off-by-one stack-based buffer overflow in the encodes() function       (CVE-2014-4975).
      Related: rhbz#1164004
    - Fix REXML billion laughs attack via parameter entity expansion       (CVE-2014-8080).
      Related: rhbz#1164004

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:1912 advisory.

    Ruby is an extensible, interpreted, object-oriented, scripting language.
    It has features to process text files and to perform system management     tasks.

    Multiple denial of service flaws were found in the way the Ruby REXML XML     parser performed expansion of parameter entities. A specially crafted XML     document could cause REXML to use an excessive amount of CPU and memory.
    (CVE-2014-8080, CVE-2014-8090)

    A stack-based buffer overflow was found in the implementation of the Ruby     Array pack() method. When performing base64 encoding, a single byte could     be written past the end of the buffer, possibly causing Ruby to crash.
    (CVE-2014-4975)

    The CVE-2014-8090 issue was discovered by Red Hat Product Security.

    All ruby users are advised to upgrade to these updated packages, which     contain backported patches to correct these issues. All running instances     of Ruby need to be restarted for this update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
79571	Mandriva Linux Security Advisory : ruby (MDVSA-2014:225)	Nessus	Mandriva Local Security Checks	2014/11/26	2021/1/6	medium
99753	openSUSE Security Update : ruby2.1 (openSUSE-2017-527)	Nessus	SuSE Local Security Checks	2017/5/1	2025/12/23	critical
181041	Oracle Linux 6 : ruby193-ruby (ELSA-2014-1913)	Nessus	Oracle Linux Local Security Checks	2023/9/7	2024/10/22	high
79596	RHEL 7 : ruby (RHSA-2014:1912)	Nessus	Red Hat Local Security Checks	2014/11/27	2024/11/4	high

检测

插件搜索

medium

critical

high

high