1. Home
  2. Security Advisories
  3. Fedora
  4. FEDORA-2013-22423

[FEDORA-2013-22423] Fedora 19: ruby

Severity Medium
Affected Packages 1
CVEs 2
Info Packages References Vulnerabilities

Update to Ruby 2.0.0-p353. This includes fix to an overflow in
floating point number parsing found in Ruby currently
being shipped on Fedora 20. This vulnerability has
been assigned the CVE identifier CVE-2013-4164. This
new rpm should fix this issue.

Package Affected Version
pkg:rpm/fedora/ruby?distro=fedora-19 < 2.0.0.353.16.fc19
ID
FEDORA-2013-22423
Severity
medium
Severity from
CVE-2013-4164
URL
https://bodhi.fedoraproject.org/updates/FEDORA-2013-22423
Published
2013-12-04T07:01:16
(10 years ago)
Modified
2013-12-04T07:01:16
(10 years ago)
Rights
Copyright 2013 Red Hat, Inc.
Other Advisories
Source # ID Name URL
Bugzilla 1033546 Bug #1033546 - CVE-2013-4164 ruby: heap overflow in floating point parsing [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1033546
Bugzilla 1034122 Bug #1034122 - ruby-2.0.0.353 is available https://bugzilla.redhat.com/show_bug.cgi?id=1034122
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/fedora/ruby?distro=fedora-19 fedora ruby < 2.0.0.353.16.fc19 fedora-19
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date