Information on source package ruby1.8

Available versions

ReleaseVersion
squeeze1.8.7.302-2squeeze1
wheezy1.8.7.352-2
sid1.8.7.358-2

Open issues

BugDescription
CVE-2011-3624
CVE-2011-4815Ruby (aka CRuby) before 1.8.7-p357 computes hash values without ...

Open unimportant issues

BugDescription
CVE-2011-0188The VpMemAlloc function in bigdecimal.c in the BigDecimal class in ...
CVE-2011-1004The FileUtils.remove_entry_secure method in Ruby 1.8.6 through ...
CVE-2011-1005The safe-level feature in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through ...
CVE-2011-2686Ruby before 1.8.7-p352 does not reset the random seed upon forking, ...
CVE-2011-2705The SecureRandom.random_bytes function in lib/securerandom.rb in Ruby ...
CVE-2011-3009Ruby before 1.8.6-p114 does not reset the random seed upon forking, ...

Resolved issues

BugDescription
CVE-2004-0755The FileStore capability in CGI::Session for Ruby before 1.8.1, and ...
CVE-2004-0983The CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.2, allows ...
CVE-2005-1992The XMLRPC server in utils.rb for the ruby library (libruby) 1.8 sets ...
CVE-2005-2337Ruby 1.6.x up to 1.6.8, 1.8.x up to 1.8.2, and 1.9.0 development up to ...
CVE-2006-1931The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, ...
CVE-2006-3694Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote ...
CVE-2006-5467The cgi.rb CGI library for Ruby 1.8 allows remote attackers to cause a ...
CVE-2006-6303The read_multipart function in cgi.rb in Ruby before 1.8.5-p2 does not ...
CVE-2007-5162The connect method in lib/net/http.rb in the (1) Net::HTTP and (2) ...
CVE-2007-5770The (1) Net::ftptls, (2) Net::telnets, (3) Net::imap, (4) Net::pop, ...
CVE-2008-1145Directory traversal vulnerability in WEBrick in Ruby 1.8 before ...
CVE-2008-1891Directory traversal vulnerability in WEBrick in Ruby 1.8.4 and ...
CVE-2008-2376Integer overflow in the rb_ary_fill function in array.c in Ruby before ...
CVE-2008-2662Multiple integer overflows in the rb_str_buf_append function in Ruby ...
CVE-2008-2663Multiple integer overflows in the rb_ary_store function in Ruby 1.8.4 ...
CVE-2008-2664The rb_str_format function in Ruby 1.8.4 and earlier, 1.8.5 before ...
CVE-2008-2725Integer overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and ...
CVE-2008-2726Integer overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and ...
CVE-2008-3443The regular expression engine (regex.c) in Ruby 1.8.5 and earlier, ...
CVE-2008-3655Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through ...
CVE-2008-3656Algorithmic complexity vulnerability in the ...
CVE-2008-3657The dl module in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, ...
CVE-2008-3790The REXML module in Ruby 1.8.6 through 1.8.6-p287, 1.8.7 through ...
CVE-2008-3905resolv.rb in Ruby 1.8.5 and earlier, 1.8.6 before 1.8.6-p287, 1.8.7 ...
CVE-2009-0642ext/openssl/ossl_ocsp.c in Ruby 1.8 and 1.9 does not properly check ...
CVE-2009-1904The BigDecimal library in Ruby 1.8.6 before p369 and 1.8.7 before p173 ...
CVE-2009-4124Heap-based buffer overflow in the rb_str_justify function in string.c ...
CVE-2009-4492WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through ...
CVE-2010-0541Cross-site scripting (XSS) vulnerability in the WEBrick HTTP server in ...
CVE-2010-2489Buffer overflow in Ruby 1.9.x before 1.9.1-p429 on Windows might allow ...

Security announcements

DSADescription
DSA-1860-1ruby1.8 ruby1.9 - several issues
DSA-1860-1ruby1.8 ruby1.9 - several issues
DSA-1695-1ruby1.8 ruby1.9 - denial of service
DSA-1651-1ruby1.8 - several vulnerabilities
DSA-1612-1ruby1.8 - several vulnerabilities
DSA-1410-1ruby1.8 - possible man-in-the-middle attacks
DSA-1410-1ruby1.8 - possible man-in-the-middle attacks
DSA-1235-1ruby1.8
DSA-1157ruby1.8
DSA-864-1ruby1.8 - programming error
DSA-748-1ruby1.8 - bad default value

Search for package or bug name: Reporting problems

Home - Testing Security Team - Debian Security - Source (SVN)