Debian/mruby: critical 9.8
In versions of mruby up to and including 1.4.0, a use-after-free vulnerability exists in src/io.c::File#initilialize_copy(). An attacker that can cause Ruby code to be run can possibly use this to exe
Action: Upgrade mruby to 1.4.0+20180418+git54905e98-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.0+20180418+git54905e98-1 | - |
Fixed versions
| 1.4.0+20180418+git54905e98-1 |
Sources
published · modified · JSON