Unscored DLA-2027-1 4 CVEs

jruby - security update

Published Dec 10, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 8	jruby	1.5.6-9+deb8u2

Vulnerabilities 4

Unscored —

CVE-2017-17742

Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1 allows an HTTP Respo…

ruby2.3 ruby jruby ruby2.0 Debian Ubuntu Alpine

Apr 3, 2018
Unscored —

CVE-2019-16201

WEBrick::HTTPAuth::DigestAuth in Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 has a regular express…

ruby2.3 ruby ruby2.5 jruby Debian Ubuntu Alpine

Nov 26, 2019
Unscored —

CVE-2019-16254

Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows HTTP Response Splitting. If a program using WEB…

ruby2.3 ruby ruby2.5 jruby Debian Ubuntu Alpine

Nov 26, 2019
Unscored —

CVE-2019-16255

Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows code injection if the first argument (aka the "…

ruby2.3 ruby ruby2.5 jruby Debian Ubuntu Alpine

Nov 26, 2019