89 matches found
MGASA-2014-0443 Updated ruby packages fix CVE-2014-8080
Updated ruby packages fix security vulnerability: Due to unrestricted entity expansion, when reading text nodes from an XML document, the REXML parser in Ruby can be coerced into allocating extremely large string objects which can consume all of the memory on a machine, causing a denial of servic...
openSUSE Security Update : ruby (openSUSE-SU-2011:0561-1)
Ruby was prone to several security issues : - a race condition allowed local users to delete arbitrary files CVE-2011-1004 - exception methods could bypass safe mode CVE-2011-1005 - webrick cross site scripting issue CVE-2010-0541 - memory corruption in the BigDecimal class CVE-2011-0188...
[slackware-security] ruby (SSA:2013-178-01)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 slackware-security ruby SSA:2013-178-01 New ruby packages are available for Slackware 13.1, 13.37, 14.0, and -current to fix a security issue. Here are the details from the Slackware 14.0 ChangeLog: +--------------------------+...
ruby
New ruby packages are available for Slackware 13.1, 13.37, 14.0, and -current to fix security issues. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/ruby-1.9.3p392-i486-1slack14.0.txz: Upgraded. This release includes security fixes about bundled JSON and REXML. For more...
[SECURITY] [DSA 1860-1] New Ruby packages fix several issues
------------------------------------------------------------------------ Debian Security Advisory DSA-1860-1 [email protected] http://www.debian.org/security/ Florian Weimer August 12, 2009 http://www.debian.org/security/faq -...
FreeBSD Ports: ruby, ruby+pthreads, ruby+pthreads+oniguruma, ruby+oniguruma
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
[SECURITY] [DSA 586-1] New ruby packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 586-1 [email protected] http://www.debian.org/security/ Martin Schulze November 8th, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 586-1] New ruby packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 586-1 [email protected] http://www.debian.org/security/ Martin Schulze November 8th, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 537-1] New Ruby packages fix insecure CGI session management
-------------------------------------------------------------------------- Debian Security Advisory DSA 537-1 [email protected] http://www.debian.org/security/ Martin Schulze August 16th, 2004 http://www.debian.org/security/faq -...