Skip to content
OpenAdvisories
Unscored DSA-1860-1 2 CVEs

ruby1.8 ruby1.9 - several issues

Published Aug 12, 2009 · Updated Mar 9, 2026

Fixed packages 4

ReleasePackageFixed in
Debian · 4.0 ruby1.8 1.8.5-4etch5
Debian · 4.0 ruby1.9 1.9.0+20060609-1etch5
Debian · 5.0 ruby1.8 1.8.7.72-3lenny1
Debian · 5.0 ruby1.9 1.9.0.2-9lenny1

Vulnerabilities 2

  • Unscored —

    ext/openssl/ossl_ocsp.c in Ruby 1.8 and 1.9 does not properly check the return value from the OCSP_basic_verify functio…

  • Unscored —
    CVE-2009-1904 Public exploit EPSS 13%

    The BigDecimal library in Ruby 1.8.6 before p369 and 1.8.7 before p173 allows context-dependent attackers to cause a de…