Red Hat Security AdvisoryRHSA-2008:0561
ruby security update
Released 2008-07-14 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) ruby-1.8.5-5.el5_2.3, ruby-1.8.5-5.el5_2.3.i386, ruby-1.8.5-5.el5_2.3.ia64 +33
- Red Hat Enterprise Linux AS version 4 irb-1.8.1-7.el4_6.1, irb-1.8.1-7.el4_6.1.i386, irb-1.8.1-7.el4_6.1.ia64 +25
- Red Hat Enterprise Linux Desktop (v. 5 client) ruby-1.8.5-5.el5_2.3, ruby-1.8.5-5.el5_2.3.i386, ruby-docs-1.8.5-5.el5_2.3 +11
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) ruby-1.8.5-5.el5_2.3, ruby-devel-1.8.5-5.el5_2.3, ruby-devel-1.8.5-5.el5_2.3.i386 +2
- Red Hat Enterprise Linux Desktop version 4 irb-1.8.1-7.el4_6.1, irb-1.8.1-7.el4_6.1.i386, ruby-1.8.1-7.el4_6.1 +11
- Red Hat Enterprise Linux ES version 4 irb-1.8.1-7.el4_6.1, irb-1.8.1-7.el4_6.1.i386, irb-1.8.1-7.el4_6.1.ia64 +18
- Red Hat Enterprise Linux WS version 4 irb-1.8.1-7.el4_6.1, irb-1.8.1-7.el4_6.1.i386, irb-1.8.1-7.el4_6.1.ia64 +18
Fixes 6 records
Priority MEDIUM 50
Multiple integer overflows in the rb_ary_store function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, and 1.8.7 before 1.8.7-p22 allow context-dependent attackers to execute arbitrary code…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.04456 · Published 2008-06-24 · Fixed CWE-190
Priority MEDIUM 50
Multiple integer overflows in the rb_str_buf_append function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2 allow context-dependent attackers…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.04264 · Published 2008-06-24 · Fixed CWE-189
Priority MEDIUM 41
Integer overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2; and (2) the rb_ary_replace function in 1.6…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.03759 · Published 2008-06-24 · Fixed CWE-189
Priority MEDIUM 41
The rb_str_format function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2 allows context-dependent attackers to trigger memory corruption via…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.0428 · Published 2008-06-24 · Fixed CWE-399
Priority MEDIUM 40
Integer overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, and 1.8.7 before 1.8.7-p22; and (2) the rb_ary_replace function in 1.6.x allows context-depe…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.037 · Published 2008-06-24 · Fixed CWE-189
Priority LOW 39
Integer overflow in the rb_ary_fill function in array.c in Ruby before revision 17756 allows context-dependent attackers to cause a denial of service (crash) or possibly have unspecified other impact via a call to the Ar…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03601 · Published 2008-07-09 · Fixed CWE-189
THREATIST.IORead the docs