All errata/sisyphus/ALT-PU-2018-3722-1
ALT-PU-2018-3722-1

Package update ruby-i18n in branch sisyphus

Version1.1.0-alt1
Task#209945
Published2018-09-17
Max severityHIGH
Severity:

Closed issues (5)

BDU:2019-03336
HIGH7.5

Уязвимость интерпретатора языка программирования Ruby, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю вызвать отказ в обслуживании

Published: 2019-10-01Modified: 2021-03-23
CVSS 3.xHIGH 7.5
CVSS:3.x/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:N/A:P
References
CVE-2013-4492
MEDIUM4.3

Cross-site scripting (XSS) vulnerability in exceptions.rb in the i18n gem before 0.6.6 for Ruby allows remote attackers to inject arbitrary web script or HTML via a crafted I18n::MissingTranslationData.new call.

Published: 2013-12-07Modified: 2026-04-29
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N
References
CVE-2014-10077
HIGH7.5

Hash#slice in lib/i18n/core_ext/hash.rb in the i18n gem before 0.8.0 for Ruby allows remote attackers to cause a denial of service (application crash) via a call in a situation where :some_key is present in keep_keys but not present in the hash.

Published: 2018-11-06Modified: 2024-11-21
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS 3.xHIGH 7.5
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
GHSA-34hf-g744-jw64
HIGH7.5

i18n Vulnerable to Denial of Service Attack

Published: 2022-05-14Modified: 2023-07-04
CVSS 3.xHIGH 7.5
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
GHSA-r5hc-9xx5-97rw
NONE

i18n gem Cross-site Scripting vulnerability

Published: 2017-10-24Modified: 2023-07-04
References