Ruby: Multiple vulnerabilities

Ruby: Multiple vulnerabilities Multiple vulnerabilities have been found in Ruby, the worst of which could lead to the remote execution of arbitrary code. ruby 2017-10-18 2017-10-18: 1 605536 629484 631034 remote 2.2.8 2.2.8

Ruby is an interpreted object-oriented programming language. The elaborate standard library includes an HTTP server (“WEBRick”) and a class for XML parsing (“REXML”).

Multiple vulnerabilities have been discovered in Ruby. Please review the referenced CVE identifiers for details.

A remote attacker could execute arbitrary code, cause a Denial of Service condition, or obtain sensitive information.

There is no known workaround at this time.

All Ruby users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=dev-lang/ruby-2.2.8"

CVE-2016-2337 CVE-2017-0898 CVE-2017-10784 CVE-2017-14033 CVE-2017-14064 b-man chrisadr