Lucene search

K
oraclelinuxOracleELSA-2013-0129
HistoryJan 11, 2013 - 12:00 a.m.

ruby security and bug fix update

2013-01-1100:00:00
Oracle
linux.oracle.com
13

0.004 Low

EPSS

Percentile

70.3%

[1.8.5-27]

  • unintentional file creation caused by inserting an illegal NUL character
    • ruby-1.8.6-CVE-2012-4522-io.c-pipe_open-command-name-should-not-contain-null-.patch
    • Related: rhbz#867750

[1.8.5-26]

  • escaping vulnerability about Exception#to_s / NameError#to_s
  • ruby-1.8.7-p371-CVE-2012-4481.patch
  • Resolves: rhbz#867750
  • unintentional file creation caused by inserting an illegal NUL character
    • ruby-1.8.6-CVE-2012-4522-io.c-rb_open_file-should-check-NUL-in-path.patch
    • Resolves: rhbz#867750

[1.8.5-25]

  • Resolve buffer overflow causing gem installation issues.
    • ruby-1.8.7-syck-avoid-buffer-overflow.patch
    • Resolves: rhbz#834381