VDB
MGASA-2019-0408
MGASA-2019-0408
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Updated ruby packages fix security vulnerabilities
Risk Scores
CVSS v4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mageia:7 | ruby | 0, 0 |
Timeline
- Dec 25, 2019 CVE Published
- Apr 16, 2026 CVE Updated
References
- https://advisories.mageia.org/MGASA-2019-0408.html advisory
- https://bugs.mageia.org/show_bug.cgi?id=25564 report
- https://www.ruby-lang.org/en/news/2019/10/01/nul-injection-file-fnmatch-cve-2019-15845/ url
- https://www.ruby-lang.org/en/news/2019/10/01/webrick-regexp-digestauth-dos-cve-2019-16201/ url
- https://www.ruby-lang.org/en/news/2019/10/01/http-response-splitting-in-webrick-cve-2019-16254/ url
- https://www.ruby-lang.org/en/news/2019/10/01/code-injection-shell-test-cve-2019-16255/ url
- https://www.ruby-lang.org/en/news/2019/10/01/ruby-2-5-7-released/ url
- https://usn.ubuntu.com/4201-1/ advisory