MGASA-2016-0342

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2016-0342.html

Import Source

https://advisories.mageia.org/MGASA-2016-0342.json

JSON Data

https://api.test.osv.dev/v1/vulns/MGASA-2016-0342

Related

CVE-2016-7798

Published

2016-10-13T07:20:57Z

Modified

2016-10-13T07:14:02Z

Summary

Updated ruby packages fix a security vulnerability

Details

A bug in openssl module caused using an all 0 IV for AES-GCM ciphers in some cases (when setting a key, an iv, and then setting a key a again (CVE-2016-779

References

https://advisories.mageia.org/MGASA-2016-0342.html
https://bugs.mageia.org/show_bug.cgi?id=19501
https://github.com/ruby/openssl/issues/49

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

Affected packages

Mageia:5 / ruby

Package

Name: ruby
Purl: pkg:rpm/mageia/ruby?distro=mageia-5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.0.0.p648-1.1.mga5

Ecosystem specific

{
    "section": "core"
}