ruby1.9.1 - security update

Fixed packages 1

Vulnerabilities 6

• Unscored —
  CVE-2011-0188

  The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as used on Apple Mac OS…

  Mar 23, 2011
• Unscored —
  CVE-2011-2705

  The SecureRandom.random_bytes function in lib/securerandom.rb in Ruby before 1.8.7-p352 and 1.9.x before 1.9.2-p290 rel…

  Aug 5, 2011
• Unscored —
  CVE-2012-4522

  The rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0 before r37163 allows contex…

  Nov 24, 2012
• Medium —
  CVE-2013-0256

  RDoc contains XSS vulnerability

  darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL.

  rdoc RubyGems
  Mar 1, 2013
• Unscored —
  CVE-2013-2065

  (1) DL and (2) Fiddle in Ruby 1.9 before 1.9.3 patchlevel 426, and 2.0 before 2.0.0 patchlevel 195, do not perform tain…

  Nov 2, 2013
• Unscored —
  CVE-2015-1855 Public exploit

  verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x…

  ruby Ruby ruby2.0 ruby1.9.1 Ubuntu
  Nov 29, 2019