 |
|
|
|
|
 |
Site Archive (Complete) | |||
|
||||
|
ABOUT US |
CONTACT |
ADVERTISE |
SUBSCRIBE |
SOURCE CODE |
CURRENT PRINT ISSUE |
NEWSLETTERS
|
RESOURCES
|
BLOGS
|
PODCASTS
|
CAREERS
|
||||
|
||||
June 23, 2008
Security Flaws Discovered, Patched in Ruby 1.8 and 1.9Patches have been issued for bugs in several of Ruby's array- and string-related functions.
Late last week, Drew Yao of Apple Product Security apparently discovered several vulnerabilities in multiple versions of Ruby that could allow attackers to execute arbitrary code or create a denial of service condition. The vulnerabilities stemmed from unchecked overflow conditions in several array-handling routines, and from an unsafe memory allocation in Ruby's string processing. The Ruby maintainers have since released patches for these vulnerabilities. Vulnerable versions include:
Patches are available here:
|
|
|
|||||||||||||||||||||||||
|
|
