Description
Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass "safe level" checks via unspecified vectors involving (1) the alias function and (2) "directory operations".
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.1 | ruby1.6 | 1.6.8-12sarge2 | DSA-1139-1 |
| Debian 3.1 | ruby1.8 | 1.8.2-7sarge4 | DSA-1157 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | irb +6 | 1.8.1-7.EL4.6 | RHSA-2006:0604 |
| RHEL 3 | irb +6 | 1.6.8-9.EL3.6 | RHSA-2006:0604 |
Advisories 3
- RHSA-2006:0604 Red Hat Security Advisory: ruby security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1139-1 ruby1.6 - missing privilege checks Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1157 ruby1.8 Debian Security (DSA / DLA) · Mar 9, 2026
References
- 18944 vdb-entry
- 21657 third-party-advisory
- oval:org.mitre.oval:def:9983 vdb-entry signature
- 21749 third-party-advisory
- JVN#13947696 third-party-advisory
- 21009 third-party-advisory
- MDKSA-2006:134 vendor-advisory
- 21598 third-party-advisory
- 21233 third-party-advisory
- ADV-2006-2760 vdb-entry
- ruby-alias-directory-security-bypass(27725) vdb-entry
- 27144 vdb-entry
- 27145 vdb-entry
- USN-325-1 vendor-advisory
- DSA-1157 vendor-advisory
- 21337 third-party-advisory
- [freebsd-security] 20060728 Ruby vulnerability? mailing-list
- SUSE-SR:2006:021 vendor-advisory
- 21272 third-party-advisory
- 21236 third-party-advisory
- DSA-1139 vendor-advisory
- RHSA-2006:0604 vendor-advisory
- JVN#83768862 third-party-advisory
- [freebsd-security] 20060730 Ruby vulnerability? mailing-list