[SECURITY] [DSA 3966-1] ruby2.3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3966-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 05, 2017 https://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-3966-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ruby Arbitrary Memory Disclosure Vulnerability

Ruby is a cross-platform, object-oriented, dynamically typed programming language developed by Japanese software developer Yukihiro Matsumoto. A security vulnerability exists in the strdup of the ext/json/ext/generator/generator.c file in Ruby versions 2.2.7 and earlier, 2.3.x through 2.3.4, and...

DEBIAN-CVE-2017-9225

An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A stack out-of-bounds write in onigencunicodegetcasefoldcodesbystr occurs during regular expression compilation. Code point 0xFFFFFFFF is not properly handled in...

Ruby colorscore gem arbitrary code execution vulnerability

Ruby is a cross-platform, object-oriented, dynamically-typed programming language developed by Japanese software developer Yukihiro Matsumoto. colorscore gem is one of the libraries used to distinguish colors. A security vulnerability exists in the 'initialize' method of the Histogram class in th...

[SECURITY] [DLA 263-1] ruby1.9.1 security update

Package : ruby1.9.1 Version : 1.9.2.0-2+deb6u5 CVE ID : CVE-2012-5371 CVE-2013-0269 Debian Bug : 693024 700471 Two vulnerabilities were identified in the Ruby language interpreter, version 1.9.1. CVE-2012-5371 Jean-Philippe Aumasson identified that Ruby computed hash values without properly...

DLA-263-1 ruby1.9.1 - security update

Bulletin has no description...

DLA-224-1 ruby1.8 - security update

Bulletin has no description...

Ruby Certificate Validation Vulnerability

Ruby is a cross-platform, object-oriented, dynamically typed programming language developed by Japanese software developer Yukihiro Matsumoto. Ruby has a security vulnerability. Due to the program failing to properly validate the domain name of a certificate. An attacker can exploit this...

DSA-3247-1 ruby2.1 - security update

Bulletin has no description...

DSA-3246-1 ruby1.9.1 - security update

Bulletin has no description...

[SECURITY] [DSA 3159-1] ruby1.8 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3159-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini February 10, 2015 http://www.debian.org/security/faq -...

DSA-3159-1 ruby1.8 - security update

Bulletin has no description...

Debian Security Advisory DSA 3157-1 (ruby1.9.1 - security update)

Multiple vulnerabilities were discovered in the interpreter for the Ruby language: CVE-2014-4975 The encodes function in pack.c had an off-by-one error that could lead to a stack-based buffer overflow. This could allow remote attackers to cause a denial of service crash or arbitrary code executio...

[SECURITY] Fedora 21 Update: rubygem-httpclient-2.4.0-2.fc21

an interface to HTTP Client for the ruby language...

[SECURITY] Fedora 20 Update: rubygem-httpclient-2.4.0-2.fc20

an interface to HTTP Client for the ruby language...

[SECURITY] Fedora 19 Update: rubygem-httpclient-2.4.0-2.fc19

an interface to HTTP Client for the ruby language...

DSA-2738-1 ruby1.9.1 - several

Bulletin has no description...

Debian Security Advisory DSA 2738-1 (ruby1.9.1 - several vulnerabilities)

Several vulnerabilities have been discovered in the interpreter for the Ruby language, which may lead to denial of service and other security problems. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2013-1821 Ben Murphy discovered that unrestricted entity...

Debian: Security Advisory (DSA-2738-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...