Multiple vulnerabilities in Ruby

Multiple vulnerabilities in Ruby may lead to a denial of service (DoS) condition or allow execution of arbitrary code. With the following vulnerabilities, an attacker can lead to denial of service condition or execute arbitrary code.

  • CVE-2008-2662
  • CVE-2008-2663
  • CVE-2008-2725
  • CVE-2008-2726
  • CVE-2008-2664

Vulnerable versions

1.8 series

  • 1.8.4 and all prior versions
  • 1.8.5-p230 and all prior versions
  • 1.8.6-p229 and all prior versions
  • 1.8.7-p21 and all prior versions

1.9 series

  • 1.9.0-1 and all prior versions

Updated version are available via Ruby homepage.

Don't miss