Skip to content
OpenAdvisories
Critical DSA-4332-1 2 CVEs

ruby2.3 - security update

Published Nov 3, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 9 ruby2.3 2.3.3-1+deb9u4

Vulnerabilities 2

  • Critical 9.8
    CVE-2018-16395 EPSS 11%

    Ruby Openssl Allows Incorrect Value Comparison

    An issue was discovered in the OpenSSL library in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. When two OpenSSL::X509::Name objects are compared using ==, depending on the ordering, non-equal objects may return t…

    ruby2.3 ruby ruby2.5 ruby2.0 Ubuntu Alpine RubyGems
  • Unscored —
    CVE-2018-16396

    An issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. …

    ruby2.3 ruby ruby2.5 ruby2.0 Ubuntu Alpine