Vulnerability Bulletins

DSA-4219 jruby - security update

   
Affected software Debian
 
Several vulnerabilities were discovered in jruby, a Javaimplementation of the Ruby programming language. They would allow anattacker to use specially crafted gem files to mount cross-sitescripting attacks, cause denial of service through an infinite loop,write arbitrary files, or run malicious code.

More info:

https://www.debian.org/security/2018/dsa-4219