Red Hat Security Advisory 2017-3485-01

Discussion in 'News Aggregator' started by Packet Storm, 19 Dec 2017.

  1. Packet Storm

    Packet Storm Guest

    Red Hat Security Advisory 2017-3485-01 - Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. The following packages have been upgraded to a later upstream version: rh-ruby24-ruby. Security Fix: A buffer underflow was found in ruby's sprintf function. An attacker, with ability to control its format string parameter, could send a specially crafted string that would disclose heap memory or crash the interpreter.

    Continue reading...
     

Share This Page

Loading...