Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2017-2216

Критический

ALT-PU-2017-2216: package ruby update to version 2.4.2-alt1

Источник
errata.altlinux.org
Дата публикации
16.09.2017
Дата обновления
04.02.2026
Устраненные уязвимости
8

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades ruby to version 2.4.2-alt1.

Устраненные уязвимости8

Связанные уязвимости

oracle-oval
больше 8 лет назад

ELSA-2018-0378: ruby security update (IMPORTANT)

CVSS3: 9.1
ubuntu
около 9 лет назад

Ruby before 2.4.2, 2.3.5, and 2.2.8 is vulnerable to a malicious format string which contains a precious specifier (*) with a huge minus value. Such situation can lead to a buffer overrun, resulting in a heap memory corruption or an information disclosure from the heap.

CVSS3: 6.5
redhat
около 9 лет назад

Ruby before 2.4.2, 2.3.5, and 2.2.8 is vulnerable to a malicious format string which contains a precious specifier (*) with a huge minus value. Such situation can lead to a buffer overrun, resulting in a heap memory corruption or an information disclosure from the heap.

CVSS3: 9.1
nvd
около 9 лет назад

Ruby before 2.4.2, 2.3.5, and 2.2.8 is vulnerable to a malicious format string which contains a precious specifier (*) with a huge minus value. Such situation can lead to a buffer overrun, resulting in a heap memory corruption or an information disclosure from the heap.

CVSS3: 9.1
debian
около 9 лет назад

Ruby before 2.4.2, 2.3.5, and 2.2.8 is vulnerable to a malicious forma ...