Unscored DLA-88-1 6 CVEs

ruby1.8 - security update

Published Nov 21, 2014 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 6.0	ruby1.8	1.8.7.302-2squeeze3

Vulnerabilities 6

Unscored —

CVE-2011-0188

The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as used on Apple Mac OS…

Mar 23, 2011
Unscored —

CVE-2011-2686

Ruby before 1.8.7-p352 does not reset the random seed upon forking, which makes it easier for context-dependent attacke…

Aug 5, 2011
Unscored —

CVE-2011-2705

The SecureRandom.random_bytes function in lib/securerandom.rb in Ruby before 1.8.7-p352 and 1.9.x before 1.9.2-p290 rel…

Aug 5, 2011
Unscored —

CVE-2011-4815

Ruby (aka CRuby) before 1.8.7-p357 computes hash values without restricting the ability to trigger hash collisions pred…

Dec 30, 2011
Unscored —

CVE-2014-8080

The REXML parser in Ruby 1.9.x before 1.9.3-p550, 2.0.x before 2.0.0-p594, and 2.1.x before 2.1.4 allows remote attacke…

ruby2.0 ruby1.9.1 Ubuntu

Nov 3, 2014
Unscored —

CVE-2014-8090

The REXML parser in Ruby 1.9.x before 1.9.3 patchlevel 551, 2.0.x before 2.0.0 patchlevel 598, and 2.1.x before 2.1.5 a…

ruby2.0 ruby1.9.1 Ubuntu

Nov 21, 2014