https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:46:37 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-03218 bdu:2019-03218 https://cve.radiocsirt.org/vuln/bdu:2019-03218 https://cve.radiocsirt.org/vuln/bell-cve-2018-16395 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2018-16395 https://cve.radiocsirt.org/vuln/certfr-2018-avi-589 certfr-2018-avi-589 https://cve.radiocsirt.org/vuln/certfr-2018-avi-589 https://cve.radiocsirt.org/vuln/cleanstart-2026-qw33820 <p><strong>Affected:</strong> CleanStart: ruby</p> <p>Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: ruby</p> <p>Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-qw33820 https://cve.radiocsirt.org/vuln/euvd-2026-68100 EUVD-2026-68100 https://cve.radiocsirt.org/vuln/euvd-2026-68100 https://cve.radiocsirt.org/vuln/fkie_cve-2018-16395 <p>An issue was discovered in the OpenSSL library in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. When two OpenSSL::X509::Name objects are compared using ==, depending on the ordering, non-equal objects may return true. When the first argument is one character longer than the second, or the second argument contains a character that is one less than a character in the same position of the first argument, the result of == will be true. This could be leveraged to create an illegitimate certificate that may be accepted as legitimate and then used in signing or encryption operations.</p> <p>An issue was discovered in the OpenSSL library in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. When two OpenSSL::X509::Name objects are compared using ==, depending on the ordering, non-equal objects may return true. When the first argument is one character longer than the second, or the second argument contains a character that is one less than a character in the same position of the first argument, the result of == will be true. This could be leveraged to create an illegitimate certificate that may be accepted as legitimate and then used in signing or encryption operations.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-16395 https://cve.radiocsirt.org/vuln/ghsa-mmrq-6999-72v8 <p><strong>Affected:</strong> RubyGems: openssl</p> <p>An issue was discovered in the OpenSSL library in Ruby when two `OpenSSL::X509::Name` objects are compared using `==`, depending on the ordering, non-equal objects may return true. When the first argument is one character longer than the second, or the second argument contains a character that is one less than a character in the same position of the first argument, the result of `==` will be true. This could be leveraged to create an illegitimate certificate that may be accepted as legitimate and then used in signing or encryption operations.</p> <p><strong>Affected:</strong> RubyGems: openssl</p> <p>An issue was discovered in the OpenSSL library in Ruby when two `OpenSSL::X509::Name` objects are compared using `==`, depending on the ordering, non-equal objects may return true. When the first argument is one character longer than the second, or the second argument contains a character that is one less than a character in the same position of the first argument, the result of `==` will be true. This could be leveraged to create an illegitimate certificate that may be accepted as legitimate and then used in signing or encryption operations.</p> https://cve.radiocsirt.org/vuln/ghsa-mmrq-6999-72v8 https://cve.radiocsirt.org/vuln/gsd-2018-16395 gsd-2018-16395 https://cve.radiocsirt.org/vuln/gsd-2018-16395 https://cve.radiocsirt.org/vuln/msrc_cve-2018-16395 msrc_CVE-2018-16395 https://cve.radiocsirt.org/vuln/msrc_cve-2018-16395 https://cve.radiocsirt.org/vuln/opensuse-su-2019:1771-1 <p>Security update for ruby-bundled-gems-rpmhelper, ruby2.5</p> <p>Security update for ruby-bundled-gems-rpmhelper, ruby2.5</p> https://cve.radiocsirt.org/vuln/opensuse-su-2019:1771-1 https://cve.radiocsirt.org/vuln/rhsa-2018:3729 <p>ruby: HTTP response splitting in WEBrick ruby: Unintentional file and directory creation with directory traversal in tempfile and tmpdir ruby: DoS by large request in WEBrick ruby: Buffer under-read in String#unpack ruby: Unintentional socket creation by poisoned NULL byte in UNIXServer and UNIXSocket ruby: Unintentional directory traversal by poisoned NULL byte in Dir ruby: OpenSSL::X509:: Name equality check does not work correctly ruby: Tainted flags are not propagated in Array#pack and String#unpack with some directives rubygems: Path traversal when writing to a symlinked basedir outside of the root rubygems: Unsafe Object Deserialization Vulnerability in gem owner allowing arbitrary code execution on specially crafted YAML rubygems: Infinite loop vulnerability due to negative size in tar header causes Denial of Service rubygems: Improper verification of signatures in tarball allows to install mis-signed gem rubygems: Missing URL validation on spec home attribute allows malicious gem to set an invalid homepage URL rubygems: XSS vulnerability in homepage attribute when displayed via gem server rubygems: Path traversal issue during gem installation allows to write to arbitrary filesystem locations</p> <p>ruby: HTTP response splitting in WEBrick ruby: Unintentional file and directory creation with directory traversal in tempfile and tmpdir ruby: DoS by large request in WEBrick ruby: Buffer under-read in String#unpack ruby: Unintentional socket creation by poisoned NULL byte in UNIXServer and UNIXSocket ruby: Unintentional directory traversal by poisoned NULL byte in Dir ruby: OpenSSL::X509:: Name equality check does not work correctly ruby: Tainted flags are not propagated in Array#pack and String#unpack with some directives rubygems: Path traversal when writing to a symlinked basedir outside of the root rubygems: Unsafe Object Deserialization Vulnerability in gem owner allowing arbitrary code execution on specially crafted YAML rubygems: Infinite loop vulnerability due to negative size in tar header causes Denial of Service rubygems: Improper verification of signatures in tarball allows to install mis-signed gem rubygems: Missing URL validation on spec home attribute allows malicious gem to set an invalid homepage URL rubygems: XSS vulnerability in homepage attribute when displayed via gem server rubygems: Path traversal issue during gem installation allows to write to arbitrary filesystem locations</p> https://cve.radiocsirt.org/vuln/rhsa-2018:3729 https://cve.radiocsirt.org/vuln/suse-su-2019:1804-1 <p>Security update for ruby-bundled-gems-rpmhelper, ruby2.5</p> <p>Security update for ruby-bundled-gems-rpmhelper, ruby2.5</p> https://cve.radiocsirt.org/vuln/suse-su-2019:1804-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-16395 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: ruby1.9.1, Ubuntu:14.04:LTS: ruby2.0, Ubuntu:16.04:LTS: ruby2.3, Ubuntu:18.04:LTS: ruby2.5</p> <p>An issue was discovered in the OpenSSL library in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. When two OpenSSL::X509::Name objects are compared using ==, depending on the ordering, non-equal objects may return true. When the first argument is one character longer than the second, or the second argument contains a character that is one less than a character in the same position of the first argument, the result of == will be true. This could be leveraged to create an illegitimate certificate that may be accepted as legitimate and then used in signing or encryption operations.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: ruby1.9.1, Ubuntu:14.04:LTS: ruby2.0, Ubuntu:16.04:LTS: ruby2.3, Ubuntu:18.04:LTS: ruby2.5</p> <p>An issue was discovered in the OpenSSL library in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. When two OpenSSL::X509::Name objects are compared using ==, depending on the ordering, non-equal objects may return true. When the first argument is one character longer than the second, or the second argument contains a character that is one less than a character in the same position of the first argument, the result of == will be true. This could be leveraged to create an illegitimate certificate that may be accepted as legitimate and then used in signing or encryption operations.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-16395