A flaw was found in the i18n gem before 0.8.0 for Ruby. The Hash#slice in lib/i18n/core_ext/hash.rb allows remote attackers to cause a denial of service (application crash) via a call in a situation where :some_key is present in keep_keys but not present in the hash (CVE-2014-10077). . MGASA-2018-0491 - Updated ruby-i18n packages fix security vulnerability Publication date: 28 Dec 2018 URL: https://advisories.mageia.org/MGASA-2018-0491.html Type: security Affected Mageia releases: 6 CVE: CVE-2014-10077 A flaw was found in the i18n gem before 0.8.0 for Ruby. The Hash#slice in lib/i18n/core_ext/hash.rb allows remote attackers to cause a denial of service (application crash) via a call in a situation where :some_key is present in keep_keys but not present in the hash (CVE-2014-10077). References: - https://bugs.mageia.org/show_bug.cgi?id=24057 - https://lists.fedoraproject.org/archives/list/
Get the latest Linux and open source security news straight to your inbox.