Updates for Ruby 2.6.5, 2.5.7, and 2.4.8 addressing vulnerabilities.
Corrective releases for the Ruby programming language 2.6.5, 2.5.7, and 2.4.8 have been issued, addressing four vulnerabilities. The most critical vulnerability (CVE-2019-16255) is in the standard Shell library (lib/shell.rb), which allows for code injection. If user-provided data is processed as the first argument in the Shell#[] or Shell#test methods used to check for file presence, an attacker could invoke arbitrary Ruby methods. Other […]
