16 matches found
OPENSUSE-SU-2026:10609-1 libruby4_0-4_0-4.0.3-1.1 on GA media
These are all security issues fixed in the libruby40-40-4.0.3-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15828-1 libruby3_4-3_4-3.4.8-1.1 on GA media
These are all security issues fixed in the libruby34-34-3.4.8-1.1 package on the GA media of openSUSE Tumbleweed...
libruby3_4-3_4-3.4.1-1.1 on GA media (moderate)
libruby34-34-3.4.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:14621-1 Rating: moderate Cross-References: CVE-2020-10663 CVE-2020-10933 CVE-2021-28965 CVE-2021-31799 CVE-2021-31810 CVE-2021-32066 CVE-2021-41816 CVE-2021-41817 CVE-2021-41819 CVE-2022-28738 CVE-2022-28739 CVE-2023-28755 CVSS...
OPENSUSE-SU-2025:14621-1 libruby3_4-3_4-3.4.1-1.1 on GA media
These are all security issues fixed in the libruby34-34-3.4.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:11657-1 libruby2_7-2_7-2.7.5-1.1 on GA media
These are all security issues fixed in the libruby27-27-2.7.5-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:11311-1 libruby3_0-3_0-3.0.1-3.2 on GA media
These are all security issues fixed in the libruby30-30-3.0.1-3.2 package on the GA media of openSUSE Tumbleweed...
Mandriva Linux Security Advisory : vim (MDVSA-2008:236-1)
Several vulnerabilities were found in the vim editor : A number of input sanitization flaws were found in various vim system functions. If a user were to open a specially crafted file, it would be possible to execute arbitrary code as the user running vim CVE-2008-2712. Ulf Hrnhammar of Secunia...
Mandriva Update for vim MDVSA-2008:236-1 (vim)
Check for the Version of vim OpenVAS Vulnerability Test Mandriva Update for vim MDVSA-2008:236-1 vim Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Fedora 7 : ruby-1.8.6.114-1.fc7 (2008-2458)
Tue Mar 4 2008 Akira TAGOH - 1.8.6.114-1 - Security fix for CVE-2008-1145. - Improve a spec file. 226381 - Correct License tag. - Fix a timestamp issue. - Own a arch-specific directory. - Tue Feb 19 2008 Fedora Release Engineering - 1.8.6.111-9 - Autorebuild for GCC 4.3 - Tue Feb 19 2008 Akira...
Debian Security Advisory DSA 537-1 (ruby)
The remote host is missing an update to ruby announced via advisory DSA 537-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
security flaw
The XMLRPC server in utils.rb for the ruby library libruby 1.8 sets an invalid default value that prevents "security protection" using handlers, which allows remote attackers to execute arbitrary commands...
ruby -- arbitrary command execution on XMLRPC server
Nobuhiro IMAI reports: the default value modification on Modulepublicinstancemethods from false to true breaks s.addhandlerXMLRPC::iPIMethods"sample", MyHandler.new style security protection. This problem could allow a remote attacker to execute arbitrary commands on XMLRPC server of libruby...
CVE-2005-1992
The XMLRPC server in utils.rb for the ruby library libruby 1.8 sets an invalid default value that prevents "security protection" using handlers, which allows remote attackers to execute arbitrary commands...
CVE-2005-1992
CVE-2005-1992 affects Ruby’s XMLRPC implementation. The XMLRPC server in utils.rb (Ruby libruby 1.8) uses an insecure default for public_instance_methods, enabling a remote attacker to trigger the XMLRPC handler to execute arbitrary commands. Impact is remote code execution via the XMLRPC service...
Ruby XML-RPC Remote Arbitrary Command Execution
The XMLRPC server in utils.rb for the ruby library libruby 1.8 sets an invalid default value that prevents "security protection" using handlers, which allows remote attackers to execute arbitrary commands...
DSA-537 ruby - insecure file permissions
Bulletin has no description...