Skip to content
OpenAdvisories
High DLA-1480-1 3 CVEs

ruby2.1 - security update

Published Aug 27, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 ruby2.1 2.1.5-2+deb8u5

Vulnerabilities 3

  • High 7.8
    CVE-2018-1000074

    RubyGems Deserialization of Untrusted Data vulnerability

    RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Deserialization of Untrusted Data vulnerability in owner …

    ruby2.3 jruby ruby2.0 ruby1.9.1 Debian Ubuntu Maven RubyGems
  • High 7.5
    CVE-2018-1000073

    RubyGems Link Following vulnerability

    RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Directory Traversal vulnerability in install_location fun…

    ruby2.3 jruby ruby2.0 rubygems Debian Ubuntu Maven RubyGems
  • Unscored —
    CVE-2016-2337

    Type confusion exists in _cancel_eval Ruby's TclTkIp class method. Attacker passing different type of object than Strin…

    Tcl ruby Ruby Tcl/Tk Ubuntu