Unscored DSA-4586-1 4 CVEs

ruby2.5 - security update

Published Dec 17, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 10	ruby2.5	2.5.5-3+deb10u1

Vulnerabilities 4

Unscored —

CVE-2019-15845

Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within File.fnmatch functions.

ruby2.3 ruby ruby2.5 Ubuntu Alpine

Nov 26, 2019
Unscored —

CVE-2019-16201

WEBrick::HTTPAuth::DigestAuth in Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 has a regular express…

ruby2.3 ruby ruby2.5 jruby Debian Ubuntu Alpine

Nov 26, 2019
Unscored —

CVE-2019-16254

Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows HTTP Response Splitting. If a program using WEB…

ruby2.3 ruby ruby2.5 jruby Debian Ubuntu Alpine

Nov 26, 2019
Unscored —

CVE-2019-16255

Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows code injection if the first argument (aka the "…

ruby2.3 ruby ruby2.5 jruby Debian Ubuntu Alpine

Nov 26, 2019