On October 22, in a security notice Canonical published details about Ruby 1.8 vulnerabilities for its Ubuntu 12.10 (Quantal Quetzal) operating system. According to Canonical, Ruby 1.8 could have allowed excessive access in untrusted programs. Shugo Maedo and Vit Ondruch discovered that Ruby incorrectly allowed untainted strings to be modified in protective safe levels.
On October 10th, in a security notice Canonical published details about Ruby 1.9.1 vulnerabilities for its Ubuntu 12.04 LTS operating system. According to Canonical, Ruby 1.9.1 could have allowed excessive access in untrusted programs. Tyler Hicks and Shugo Maeda discovered that Ruby incorrectly allowed untainted strings to be modified in protective safe levels.
On October 22, in a security notice Canonical published details about Ruby 1.9.1 vulnerabilities for its Ubuntu 12.10 and Ubuntu 12.04 LTS operating systems.
According to Canonical, several security issues were fixed in Ruby.
On September 25th, in a security notice Canonical published details about a few Ruby and RubyGems vulnerabilities for its Ubuntu 12.04 LTS (Precise Pangolin) operating system. These are the three vulnerabilities found in the Ruby and RubyGems for Ubuntu 12.04 LTS: CVE-2011-1005, CVE-2012-2126, and CVE-2012-3430.
On February 14, Canonical published in a security notice details about Qt vulnerabilities for its Ubuntu 12.10, Ubuntu 12.04 LTS, Ubuntu 11.10 and Ubuntu 10.04 LTS (Lucid Lynx) operating systems. According to Canonical, several security issues were fixed in Qt. For example, Richard J. Moore and Peter Hartmann discovered that Qt allowed redirecting requests from http to file schemes.
I have been trying to understand RVM and decided to do so by not using it and seeing the consequences. I am trying to see how I can manage different versions of ruby and their gemsets without RVM.
I compiled Ruby 1.9.1 from source on my Ubuntu machine and found it in the path usr/local/bin/ruby.
On October 11th, Canonical published in a security notice details about MoinMoin vulnerabilities for its Ubuntu 12.04 LTS, Ubuntu 11.10, Ubuntu 11.04, and Ubuntu 10.04 LTS operating systems.
According to Canonical, Several security issues were fixed in MoinMoin.
On October 26, in a security notice Canonical published details about an Exim vulnerability for its Ubuntu 12.10, Ubuntu 12.04 LTS, Ubuntu 11.10, Ubuntu 11.04, and Ubuntu 10.04 LTS operating systems.
According to Canonical, Exim could have been made to run programs if it received specially crafted network traffic.
It was discovered that Exim incorrectly handled DKIM DNS decoding.
On February 25, in a security notice Canonical published details about Pidgin vulnerabilities for its Ubuntu 12.10, Ubuntu 12.04 LTS, Ubuntu 11.10, and Ubuntu 10.04 LTS operating systems.
According to Canonical, several security issues have been fixed in Pidgin.
For example, it was discovered that Pidgin incorrectly handled file transfers in the MXit protocol handler.