ruby1.9.1 - security update

Fixed packages 1

Vulnerabilities 10

• Critical 9.8
  CVE-2018-1000076

  RubyGems Improper Verification of Cryptographic Signature vulnerability

  RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Improper Verification of Cryptographic Signature vulnerab…

  ruby2.3 jruby ruby2.0 rubygems Debian Ubuntu Maven RubyGems
  Mar 13, 2018
• High 7.5
  CVE-2018-1000075

  RubyGems Infinite Loop vulnerability

  RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a infinite loop caused by negative size vulnerability in ru…

  ruby2.3 jruby ruby2.0 ruby1.9.1 Debian Ubuntu Maven RubyGems
  Mar 13, 2018
• Medium 6.1
  CVE-2018-1000078

  RubyGems Cross-site Scripting vulnerability

  RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Cross Site Scripting (XSS) vulnerability in gem server di…

  ruby2.3 jruby ruby2.0 ruby1.9.1 Debian Ubuntu Maven RubyGems
  Mar 13, 2018
• Medium 5.3
  CVE-2018-1000077

  RubyGems Improper Input Validation vulnerability

  RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Improper Input Validation vulnerability in ruby gems spec…

  ruby2.3 jruby ruby2.0 ruby1.9.1 Debian Ubuntu Maven RubyGems
  Mar 13, 2018
• Unscored —
  CVE-2017-17742

  Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1 allows an HTTP Respo…

  ruby2.3 ruby jruby ruby2.0 Debian Ubuntu Alpine
  Apr 3, 2018
• Unscored —
  CVE-2018-6914 EPSS 10%

  Directory traversal vulnerability in the Dir.mktmpdir method in the tmpdir library in Ruby before 2.2.10, 2.3.x before …

  ruby2.3 ruby ruby2.0 ruby1.9.1 Ubuntu Alpine
  Apr 3, 2018
• Unscored —
  CVE-2018-8777

  In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1, an attacker can …

  ruby2.3 ruby ruby2.0 ruby1.9.1 Ubuntu Alpine
  Apr 3, 2018
• Unscored —
  CVE-2018-8778

  In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1, an attacker cont…

  ruby2.3 ruby ruby2.0 ruby1.9.1 Ubuntu Alpine
  Apr 3, 2018
• Unscored —
  CVE-2018-8779

  In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1, the UNIXServer.o…

  ruby2.3 ruby ruby2.0 ruby1.9.1 Ubuntu Alpine
  Apr 3, 2018
• Unscored —
  CVE-2018-8780

  In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1, the Dir.open, Di…

  ruby2.3 ruby ruby2.0 ruby1.9.1 Ubuntu Alpine
  Apr 3, 2018