Lucene search

K
altlinuxHttps://packages.altlinux.org/en/sisyphus/security/0E264D49EA8218DD2DAABA738DF9FA3A
HistoryAug 12, 2008 - 12:00 a.m.

Security fix for the ALT Linux 5 package ruby version 1.8.7-alt6

2008-08-1200:00:00
https://packages.altlinux.org/en/sisyphus/security/
packages.altlinux.org
20

EPSS

0.118

Percentile

95.4%

Aug. 12, 2008 Kirill A. Shutemov 1.8.7-alt6

- 1.8.7.72
  + Multiple vulnerabilities
    + Several vulnerabilities in safe level
      + untrace_var is permitted at safe level 4
      + $PROGRAM_NAME may be modified at safe level 4
      + insecure methods may be called at safe level 1-3
      + syslog operations are permitted at safe level 4
    + DoS vulnerability in WEBrick
    + Lack of taintness check in dl
    + CVE-2008-1447: DNS spoofing vulnerability in resolv.rb