Corrective releases have been issued for the Ruby programming language , and , addressing four vulnerabilities. The most critical vulnerability (CVE-2019-16255) in the standard library (lib/shell.rb), which allows code injection. When processing data obtained from user inputs in the first argument of Shell#[] or Shell#test methods, used to check for file existence, an attacker can trigger arbitrary Ruby methods.
Other issues include:
- — susceptibility of the built-in http server to HTTP response splitting attacks (if a program inserts unvalidated data into the HTTP response header, it can split the header by inserting a newline character);
- injection of a null character (\0) in file paths checked via the File.fnmatch and File.fnmatch? methods, which could lead to false positives during validation;
- — denial of service in the Digest authentication module for WEBrick.
Source: opennet.ru
