The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ruby_parser | Ryan_davis | * | 3.1.1 (including) |
| Ruby_parser | Ryan_davis | 1.0.0 (including) | 1.0.0 (including) |
| Ruby_parser | Ryan_davis | 2.0.0 (including) | 2.0.0 (including) |
| Ruby_parser | Ryan_davis | 2.0.1 (including) | 2.0.1 (including) |
| Ruby_parser | Ryan_davis | 2.0.2 (including) | 2.0.2 (including) |
| Ruby_parser | Ryan_davis | 2.0.3 (including) | 2.0.3 (including) |
| Ruby_parser | Ryan_davis | 2.0.4 (including) | 2.0.4 (including) |
| Ruby_parser | Ryan_davis | 2.0.5 (including) | 2.0.5 (including) |
| Ruby_parser | Ryan_davis | 2.0.6 (including) | 2.0.6 (including) |
| Ruby_parser | Ryan_davis | 2.1.0 (including) | 2.1.0 (including) |
| Ruby_parser | Ryan_davis | 2.2.0 (including) | 2.2.0 (including) |
| Ruby_parser | Ryan_davis | 2.3.0 (including) | 2.3.0 (including) |
| Ruby_parser | Ryan_davis | 2.3.1 (including) | 2.3.1 (including) |
| Ruby_parser | Ryan_davis | 3.0.0 (including) | 3.0.0 (including) |
| Ruby_parser | Ryan_davis | 3.0.0.a1 (including) | 3.0.0.a1 (including) |
| Ruby_parser | Ryan_davis | 3.0.0.a2 (including) | 3.0.0.a2 (including) |
| Ruby_parser | Ryan_davis | 3.0.0.a3 (including) | 3.0.0.a3 (including) |
| Ruby_parser | Ryan_davis | 3.0.0.a4 (including) | 3.0.0.a4 (including) |
| Ruby_parser | Ryan_davis | 3.0.0.a5 (including) | 3.0.0.a5 (including) |
| Ruby_parser | Ryan_davis | 3.0.0.a6 (including) | 3.0.0.a6 (including) |
| Ruby_parser | Ryan_davis | 3.0.0.a7 (including) | 3.0.0.a7 (including) |
| Ruby_parser | Ryan_davis | 3.0.0.a8 (including) | 3.0.0.a8 (including) |
| Ruby_parser | Ryan_davis | 3.0.0.a9 (including) | 3.0.0.a9 (including) |
| Ruby_parser | Ryan_davis | 3.0.0.a10 (including) | 3.0.0.a10 (including) |
| Ruby_parser | Ryan_davis | 3.0.1 (including) | 3.0.1 (including) |
| Ruby_parser | Ryan_davis | 3.0.2 (including) | 3.0.2 (including) |
| Ruby_parser | Ryan_davis | 3.0.3 (including) | 3.0.3 (including) |
| Ruby_parser | Ryan_davis | 3.0.4 (including) | 3.0.4 (including) |
| Ruby_parser | Ryan_davis | 3.1.0 (including) | 3.1.0 (including) |
| CloudForms for RHEL 6 | RedHat | rubygem-activesupport-1:3.0.10-10.el6cf | * |
| CloudForms for RHEL 6 | RedHat | rubygem-delayed_job-0:2.1.4-3.el6cf | * |
| CloudForms for RHEL 6 | RedHat | rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf | * |
| CloudForms for RHEL 6 | RedHat | rubygem-rack-1:1.3.0-3.el6cf | * |
| CloudForms for RHEL 6 | RedHat | rubygem-rails_warden-0:0.5.5-2.el6cf | * |
| CloudForms for RHEL 6 | RedHat | rubygem-rdoc-0:3.8-6.el6cf | * |
| CloudForms for RHEL 6 | RedHat | rubygem-rspec-rails-0:2.6.1-7.el6cf | * |
| CloudForms for RHEL 6 | RedHat | rubygem-ruby_parser-0:2.0.4-6.el6cf | * |
| CloudForms for RHEL 6 | RedHat | rubygem-shoulda-0:2.11.3-5.el6cf | * |
| Red Hat Subscription Asset Manager 1.2 | RedHat | apache-commons-codec-0:1.7-2.el6_3 | * |
| Red Hat Subscription Asset Manager 1.2 | RedHat | apache-mime4j-0:0.6-4_redhat_1.ep6.el6.1 | * |
| Red Hat Subscription Asset Manager 1.2 | RedHat | candlepin-0:0.7.23-1.el6_3 | * |
| Red Hat Subscription Asset Manager 1.2 | RedHat | elasticsearch-0:0.19.9-5.el6_3 | * |
| Red Hat Subscription Asset Manager 1.2 | RedHat | katello-0:1.2.1-15h.el6_3 | * |
| Red Hat Subscription Asset Manager 1.2 | RedHat | katello-certs-tools-0:1.2.1-1h.el6_3 | * |
| Red Hat Subscription Asset Manager 1.2 | RedHat | katello-cli-0:1.2.1-12h.el6_3 | * |
| Red Hat Subscription Asset Manager 1.2 | RedHat | katello-configure-0:1.2.3-3h.el6_3 | * |
| Red Hat Subscription Asset Manager 1.2 | RedHat | katello-selinux-0:1.2.1-2h.el6_3 | * |
| Red Hat Subscription Asset Manager 1.2 | RedHat | lucene3-0:3.6.1-10h.el6_3 | * |
| Red Hat Subscription Asset Manager 1.2 | RedHat | puppet-0:2.6.17-2.el6cf | * |
| Red Hat Subscription Asset Manager 1.2 | RedHat | quartz-0:2.1.5-4.el6_3 | * |
| Red Hat Subscription Asset Manager 1.2 | RedHat | rubygem-activesupport-1:3.0.10-10.el6cf | * |
| Red Hat Subscription Asset Manager 1.2 | RedHat | rubygem-apipie-rails-0:0.0.12-2.el6cf | * |
| Red Hat Subscription Asset Manager 1.2 | RedHat | rubygem-ldap_fluff-0:0.1.3-1.el6_3 | * |
| Red Hat Subscription Asset Manager 1.2 | RedHat | rubygem-mail-0:2.3.0-3.el6cf | * |
| Red Hat Subscription Asset Manager 1.2 | RedHat | rubygem-rack-1:1.3.0-3.el6cf | * |
| Red Hat Subscription Asset Manager 1.2 | RedHat | rubygem-ruby_parser-0:2.0.4-6.el6cf | * |
| Red Hat Subscription Asset Manager 1.2 | RedHat | sigar-0:1.6.5-0.12.git58097d9h.el6_3 | * |
| Red Hat Subscription Asset Manager 1.2 | RedHat | snappy-java-0:1.0.4-2.el6_3 | * |
| Red Hat Subscription Asset Manager 1.2 | RedHat | thumbslug-0:0.0.28-1.el6_3 | * |
| RHEL 6 Version of OpenShift Enterprise | RedHat | graphviz-0:2.26.0-10.el6 | * |
| RHEL 6 Version of OpenShift Enterprise | RedHat | openshift-console-0:0.0.16-1.el6op | * |
| RHEL 6 Version of OpenShift Enterprise | RedHat | openshift-origin-broker-0:1.0.11-1.el6op | * |
| RHEL 6 Version of OpenShift Enterprise | RedHat | openshift-origin-broker-util-0:1.0.15-1.el6op | * |
| RHEL 6 Version of OpenShift Enterprise | RedHat | openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op | * |
| RHEL 6 Version of OpenShift Enterprise | RedHat | openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op | * |
| RHEL 6 Version of OpenShift Enterprise | RedHat | openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op | * |
| RHEL 6 Version of OpenShift Enterprise | RedHat | openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op | * |
| RHEL 6 Version of OpenShift Enterprise | RedHat | openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op | * |
| RHEL 6 Version of OpenShift Enterprise | RedHat | openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op | * |
| RHEL 6 Version of OpenShift Enterprise | RedHat | openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op | * |
| RHEL 6 Version of OpenShift Enterprise | RedHat | openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op | * |
| RHEL 6 Version of OpenShift Enterprise | RedHat | openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op | * |
| RHEL 6 Version of OpenShift Enterprise | RedHat | openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op | * |
| RHEL 6 Version of OpenShift Enterprise | RedHat | openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op | * |
| RHEL 6 Version of OpenShift Enterprise | RedHat | openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op | * |
| RHEL 6 Version of OpenShift Enterprise | RedHat | openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op | * |
| RHEL 6 Version of OpenShift Enterprise | RedHat | openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op | * |
| RHEL 6 Version of OpenShift Enterprise | RedHat | php-0:5.3.3-22.el6 | * |
| RHEL 6 Version of OpenShift Enterprise | RedHat | ruby193-ruby-0:1.9.3.327-25.el6 | * |
| RHEL 6 Version of OpenShift Enterprise | RedHat | ruby193-rubygem-actionpack-1:3.2.8-3.el6 | * |
| RHEL 6 Version of OpenShift Enterprise | RedHat | ruby193-rubygem-activemodel-0:3.2.8-2.el6 | * |
| RHEL 6 Version of OpenShift Enterprise | RedHat | ruby193-rubygem-activerecord-1:3.2.8-3.el6 | * |
| RHEL 6 Version of OpenShift Enterprise | RedHat | ruby193-rubygem-railties-0:3.2.8-2.el6 | * |
| RHEL 6 Version of OpenShift Enterprise | RedHat | ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op | * |
| RHEL 6 Version of OpenShift Enterprise | RedHat | rubygem-actionpack-1:3.0.13-4.el6op | * |
| RHEL 6 Version of OpenShift Enterprise | RedHat | rubygem-activemodel-0:3.0.13-3.el6op | * |
| RHEL 6 Version of OpenShift Enterprise | RedHat | rubygem-activerecord-1:3.0.13-5.el6op | * |
| RHEL 6 Version of OpenShift Enterprise | RedHat | rubygem-bson-0:1.8.1-2.el6op | * |
| RHEL 6 Version of OpenShift Enterprise | RedHat | rubygem-mongo-0:1.8.1-2.el6op | * |
| RHEL 6 Version of OpenShift Enterprise | RedHat | rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op | * |
| RHEL 6 Version of OpenShift Enterprise | RedHat | rubygem-openshift-origin-console-0:1.0.10-1.el6op | * |
| RHEL 6 Version of OpenShift Enterprise | RedHat | rubygem-openshift-origin-controller-0:1.0.12-1.el6op | * |
| RHEL 6 Version of OpenShift Enterprise | RedHat | rubygem-openshift-origin-node-0:1.0.11-1.el6op | * |
| RHEL 6 Version of OpenShift Enterprise | RedHat | rubygem-ruby_parser-0:2.0.4-6.el6op | * |
| Ruby-parser | Ubuntu | artful | * |
| Ruby-parser | Ubuntu | bionic | * |
| Ruby-parser | Ubuntu | cosmic | * |
| Ruby-parser | Ubuntu | disco | * |
| Ruby-parser | Ubuntu | eoan | * |
| Ruby-parser | Ubuntu | esm-apps/bionic | * |
| Ruby-parser | Ubuntu | esm-apps/focal | * |
| Ruby-parser | Ubuntu | esm-apps/xenial | * |
| Ruby-parser | Ubuntu | focal | * |
| Ruby-parser | Ubuntu | groovy | * |
| Ruby-parser | Ubuntu | precise | * |
| Ruby-parser | Ubuntu | quantal | * |
| Ruby-parser | Ubuntu | raring | * |
| Ruby-parser | Ubuntu | saucy | * |
| Ruby-parser | Ubuntu | trusty | * |
| Ruby-parser | Ubuntu | utopic | * |
| Ruby-parser | Ubuntu | vivid | * |
| Ruby-parser | Ubuntu | wily | * |
| Ruby-parser | Ubuntu | xenial | * |
| Ruby-parser | Ubuntu | yakkety | * |
| Ruby-parser | Ubuntu | zesty | * |