rpm package
almalinux/rubygem-abrt
pkg:rpm/almalinux/rubygem-abrt
Vulnerabilities (43)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2019-15845 | Med | 6.5 | < 0.3.0-4.module_el8.5.0+2625+ec418553 | 0.3.0-4.module_el8.5.0+2625+ec418553 | Nov 26, 2019 | Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within File.fnmatch functions. | |
| CVE-2019-19012 | Cri | 9.8 | < 0.3.0-4.module_el8.5.0+2625+ec418553 | 0.3.0-4.module_el8.5.0+2625+ec418553 | Nov 17, 2019 | An integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9.4_rc2 leads to an out-of-bounds read, in which the offset of this read is under the control of an attacker. (This only affects the 32-bit compiled version). Remote attackers can cause a d | |
| CVE-2019-8324 | Hig | 8.8 | < 0.3.0-4.module_el8.5.0+259+8cec6917 | 0.3.0-4.module_el8.5.0+259+8cec6917 | Jun 17, 2019 | An issue was discovered in RubyGems 2.6 and later through 3.0.2. A crafted gem with a multi-line name is not handled correctly. Therefore, an attacker could inject arbitrary code to the stub line of gemspec, which is eval-ed by code in ensure_loadable_spec during the preinstall c |
- affected < 0.3.0-4.module_el8.5.0+2625+ec418553fixed 0.3.0-4.module_el8.5.0+2625+ec418553
Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within File.fnmatch functions.
- affected < 0.3.0-4.module_el8.5.0+2625+ec418553fixed 0.3.0-4.module_el8.5.0+2625+ec418553
An integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9.4_rc2 leads to an out-of-bounds read, in which the offset of this read is under the control of an attacker. (This only affects the 32-bit compiled version). Remote attackers can cause a d
- affected < 0.3.0-4.module_el8.5.0+259+8cec6917fixed 0.3.0-4.module_el8.5.0+259+8cec6917
An issue was discovered in RubyGems 2.6 and later through 3.0.2. A crafted gem with a multi-line name is not handled correctly. Therefore, an attacker could inject arbitrary code to the stub line of gemspec, which is eval-ed by code in ensure_loadable_spec during the preinstall c
Page 3 of 3