Stay Secure with the Latest Linux Advisories

security advisoryfedoraupdate

Fedora 27: 2017-4166994614 Critical: Ruby Escaping Injection

Update to the Ruby 2.4.2.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-4166994614 2017-10-02 14:21:47.662128 --------------------------------------------------------------------------------Name : ruby Product : Fedora 27 Version : 2.4.2 Release : 84.fc27 URL : https://www.ruby-lang.org/ Summary : An interpreter of object-oriented scripting language Description : Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks (as in Perl). It is simple, straight-forward, and extensible. --------------------------------------------------------------------------------Update Information: Update to the Ruby 2.4.2. --------------------------------------------------------------------------------References: [ 1 ] Bug #1492015 - CVE-2017-0898 ruby: Buffer underrun vulnerability in Kernel.sprintf https://bugzilla.redhat.com/show_bug.cgi?id=1492015 [ 2 ] Bug #1492012 - CVE-2017-10784 ruby: Escape sequence injection vulnerability in the Basic authentication of WEBrick https://bugzilla.redhat.com/show_bug.cgi?id=1492012 [ 3 ] Bug #1491866 - CVE-2017-14033 ruby: Buffer underrun in OpenSSL ASN1 decode https://bugzilla.redhat.com/show_bug.cgi?id=1491866 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade ruby' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . Python 3.6.8 is released for Ubuntu 18.04 to fix multiple vulnerabilities. Ensure your system's safety by updating today!. Ruby Update, Fedora Security, Security Patch, System Management. . Severity: Critical. LinuxSecurity.com Team

Oct 02, 2017 •Critical Fedora