Ruby/rubocop/0.44.1

RuboCop is a Ruby code style checking and code formatting tool. It aims to enforce the community-driven Ruby Style Guide.

Repo Link: https://rubygems.org/gems/rubocop
License: MIT

2 Security Vulnerabilities

RuboCop gem Insecure use of /tmp

Published date: 2017-11-15T20:39:47Z

CVE: CVE-2017-8418

Links:

RuboCop 0.48.1 and earlier does not use /tmp in safe way, allowing local users to exploit this to tamper with cache files belonging to other users.

Affected versions: ["0.48.1", "0.48.0", "0.47.1", "0.47.0", "0.46.0", "0.45.0", "0.44.1", "0.44.0", "0.43.0", "0.42.0", "0.41.2", "0.41.1", "0.41.0", "0.40.0", "0.39.0", "0.38.0", "0.37.2", "0.37.1", "0.37.0", "0.36.0", "0.35.1", "0.35.0", "0.34.2", "0.34.1", "0.34.0", "0.33.0", "0.32.1", "0.32.0", "0.31.0", "0.30.1", "0.30.0", "0.29.1", "0.29.0", "0.28.0", "0.27.1", "0.27.0", "0.26.1", "0.26.0", "0.25.0", "0.24.1", "0.24.0", "0.23.0", "0.22.0", "0.21.0", "0.20.1", "0.20.0", "0.19.1", "0.19.0", "0.18.1", "0.18.0", "0.17.0", "0.16.0", "0.15.0", "0.14.1", "0.14.0", "0.13.1", "0.13.0", "0.12.0", "0.11.1", "0.11.0", "0.10.0", "0.9.1", "0.9.0", "0.8.3", "0.8.2", "0.8.1", "0.8.0", "0.7.2", "0.7.1", "0.7.0", "0.6.1", "0.6.0", "0.5.0", "0.4.6", "0.4.5", "0.4.4", "0.4.3", "0.4.2", "0.4.1", "0.4.0", "0.3.2", "0.3.1", "0.3.0", "0.2.1", "0.2.0", "0.1.0", "0.0.0"]

Secure versions: [1.2.0, 1.1.0, 1.0.0, 0.93.1, 0.93.0, 0.92.0, 0.91.1, 0.91.0, 0.90.0, 0.89.1, 0.89.0, 0.88.0, 0.87.1, 0.87.0, 0.86.0, 0.85.1, 0.85.0, 0.84.0, 0.83.0, 0.82.0, 0.81.0, 0.80.1, 0.80.0, 0.79.0, 0.78.0, 0.77.0, 0.76.0, 0.75.1, 0.75.0, 0.74.0, 0.73.0, 0.72.0, 0.71.0, 0.70.0, 0.69.0, 0.68.1, 0.68.0, 0.67.2, 0.67.1, 0.67.0, 0.66.0, 0.65.0, 0.64.0, 0.63.1, 0.63.0, 0.62.0, 0.61.1, 0.61.0, 0.60.0, 0.59.2, 0.59.1, 0.59.0, 0.58.2, 0.58.1, 0.58.0, 0.57.2, 0.57.1, 0.57.0, 0.56.0, 0.55.0, 0.54.0, 0.53.0, 0.52.1, 0.52.0, 0.51.0, 0.50.0, 0.49.1, 0.49.0, 1.3.0, 1.3.1, 1.4.0, 1.4.1, 1.4.2, 1.5.0, 1.5.1, 1.5.2, 1.6.0, 1.6.1, 1.7.0, 1.8.0, 1.8.1, 1.9.0, 1.9.1, 1.10.0, 1.11.0, 1.12.0, 1.12.1, 1.13.0, 1.14.0, 1.15.0, 1.16.0, 1.16.1, 1.17.0, 1.18.0, 1.18.1, 1.18.2, 1.18.3, 1.18.4, 1.19.0, 1.19.1, 1.20.0, 1.21.0, 1.22.0, 1.22.1, 1.22.2, 1.22.3, 1.23.0, 1.24.0, 1.24.1, 1.25.0, 1.25.1, 1.26.0, 1.26.1, 1.27.0, 1.28.0, 1.28.1, 1.28.2, 1.29.0, 1.29.1, 1.30.0, 1.30.1, 1.31.0, 1.31.1, 1.31.2, 1.32.0, 1.33.0, 1.34.0, 1.34.1, 1.35.0, 1.35.1, 1.36.0, 1.37.0, 1.37.1, 1.38.0, 1.39.0, 1.40.0, 1.41.0, 1.41.1, 1.42.0, 1.43.0, 1.44.0, 1.44.1, 1.45.0, 1.45.1, 1.46.0, 1.47.0, 1.48.0, 1.48.1, 1.49.0, 1.50.0, 1.50.1, 1.50.2, 1.51.0, 1.52.0, 1.52.1, 1.53.0, 1.53.1, 1.54.0, 1.54.1, 1.54.2, 1.55.0, 1.55.1, 1.56.0, 1.56.1, 1.56.2, 1.56.3, 1.56.4, 1.57.0, 1.57.1, 1.57.2, 1.58.0, 1.59.0, 1.60.0, 1.60.1, 1.60.2, 1.61.0, 1.62.0, 1.62.1, 1.63.0, 1.63.1, 1.63.2, 1.63.3, 1.63.4, 1.63.5, 1.64.0, 1.64.1, 1.65.0, 1.65.1, 1.66.0, 1.66.1, 1.67.0, 1.68.0]

Recommendation: Update to version 1.68.0.

RuboCop gem Insecure use of /tmp

Published date: 2017-05-01

CVE: 2017-8418

CVSS V2: 2.1

CVSS V3: 3.3

Links:

https://github.com/bbatsov/rubocop/issues/4336

RuboCop 0.48.1 and earlier does not use /tmp in safe way, allowing local users to exploit this to tamper with cache files belonging to other users.

Recommendation: Update to version 1.68.0.

279 Other Versions

Version	License	Security	Released
0.43.0	MIT	2	2016-09-19 - 08:02	about 8 years
0.42.0	MIT	2	2016-07-25 - 09:16	over 8 years
0.41.2	MIT	2	2016-07-07 - 11:55	over 8 years
0.41.1	MIT	2	2016-06-26 - 08:50	over 8 years
0.41.0	MIT	2	2016-06-25 - 17:50	over 8 years
0.40.0	MIT	2	2016-05-09 - 17:45	over 8 years
0.39.0	MIT	2	2016-03-27 - 11:16	over 8 years
0.38.0	MIT	2	2016-03-09 - 15:10	over 8 years
0.37.2	MIT	2	2016-02-11 - 12:50	over 8 years
0.37.1	MIT	2	2016-02-09 - 16:45	over 8 years
0.37.0	MIT	2	2016-02-04 - 06:37	almost 9 years
0.36.0	MIT	2	2016-01-14 - 18:22	almost 9 years
0.35.1	MIT	2	2015-11-10 - 17:09	almost 9 years
0.35.0	MIT	2	2015-11-07 - 06:46	almost 9 years
0.34.2	MIT	2	2015-09-21 - 14:50	about 9 years
0.34.1	MIT	2	2015-09-09 - 11:29	about 9 years
0.34.0	MIT	2	2015-09-05 - 05:06	about 9 years
0.33.0	MIT	2	2015-08-05 - 12:17	over 9 years
0.32.1	MIT	2	2015-06-24 - 06:17	over 9 years
0.32.0	MIT	2	2015-06-06 - 09:02	over 9 years
0.31.0	MIT	2	2015-05-05 - 17:06	over 9 years
0.30.1	MIT	2	2015-04-21 - 11:54	over 9 years
0.30.0	MIT	2	2015-04-06 - 15:38	over 9 years
0.29.1	MIT	2	2015-02-13 - 09:44	over 9 years
0.29.0	MIT	2	2015-02-05 - 20:28	over 9 years
0.28.0	MIT	2	2014-12-10 - 17:17	almost 10 years
0.27.1	MIT	2	2014-11-08 - 11:26	almost 10 years
0.27.0	MIT	2	2014-10-30 - 16:43	about 10 years
0.26.1	MIT	2	2014-09-18 - 12:10	about 10 years
0.26.0	MIT	2	2014-09-03 - 12:35	about 10 years
0.25.0	MIT	2	2014-08-15 - 11:19	about 10 years
0.24.1	MIT	2	2014-07-03 - 11:40	over 10 years
0.24.0	MIT	2	2014-06-25 - 06:50	over 10 years
0.23.0	MIT	2	2014-06-02 - 12:19	over 10 years
0.22.0	MIT	2	2014-05-20 - 14:36	over 10 years
0.21.0	MIT	2	2014-04-24 - 09:41	over 10 years
0.20.1	MIT	2	2014-04-05 - 12:16	over 10 years
0.20.0	MIT	2	2014-04-02 - 14:03	over 10 years
0.19.1	MIT	2	2014-03-17 - 15:57	over 10 years
0.19.0	MIT	2	2014-03-13 - 16:07	over 10 years
0.18.1	MIT	2	2014-02-02 - 10:11	almost 11 years
0.18.0	MIT	2	2014-01-30 - 16:11	almost 11 years
0.17.0	MIT	2	2014-01-23 - 15:44	almost 11 years
0.16.0	MIT	2	2013-12-25 - 18:01	almost 11 years
0.15.0	MIT	2	2013-11-06 - 14:55	almost 11 years
0.14.1	MIT	2	2013-10-10 - 09:22	about 11 years
0.14.0	MIT	2	2013-10-07 - 11:55	about 11 years
0.13.1	MIT	2	2013-09-19 - 11:17	about 11 years
0.13.0	MIT	2	2013-09-13 - 14:12	about 11 years
0.12.0	MIT	2	2013-08-23 - 08:20	about 11 years
0.11.1	MIT	2	2013-08-12 - 08:41	about 11 years
0.11.0	MIT	2	2013-08-09 - 14:44	about 11 years
0.10.0	MIT	2	2013-07-17 - 18:38	over 11 years
0.9.1	MIT	2	2013-07-05 - 15:13	over 11 years
0.9.0	MIT	2	2013-07-01 - 12:57	over 11 years
0.8.3	MIT	2	2013-06-18 - 12:41	over 11 years
0.8.2	MIT	2	2013-06-05 - 11:46	over 11 years
0.8.1	MIT	2	2013-05-30 - 08:11	over 11 years
0.8.0	MIT	2	2013-05-28 - 09:06	over 11 years
0.7.2	MIT	2	2013-05-13 - 07:00	over 11 years
0.7.1	MIT	2	2013-05-11 - 12:01	over 11 years
0.7.0	MIT	2	2013-05-11 - 05:40	over 11 years
0.6.1	MIT	2	2013-04-28 - 12:44	over 11 years
0.6.0	MIT	2	2013-04-23 - 11:23	over 11 years
0.5.0	MIT	2	2013-04-17 - 15:09	over 11 years
0.4.6	MIT	2	2013-04-15 - 13:21	over 11 years
0.4.5	MIT	2	2013-04-15 - 13:18	over 11 years
0.4.4	MIT	2	2013-04-14 - 14:26	over 11 years
0.4.3	MIT	2	2013-04-14 - 06:10	over 11 years
0.4.2	MIT	2	2013-04-13 - 19:20	over 11 years
0.4.1	MIT	2	2013-04-13 - 11:20	over 11 years
0.4.0	MIT	2	2013-04-11 - 09:45	over 11 years
0.3.2	MIT	2	2013-04-06 - 17:24	over 11 years
0.3.1	MIT	2	2013-02-28 - 20:45	over 11 years
0.3.0	MIT	2	2013-02-11 - 15:55	over 11 years
0.2.1	MIT	2	2013-01-12 - 15:56	almost 12 years
0.2.0	MIT	2	2013-01-02 - 19:42	almost 12 years
0.1.0	MIT	2	2012-12-20 - 09:56	almost 12 years
0.0.0	UNKNOWN	2	2012-05-03 - 12:36	over 12 years