Oval Definition:oval:com.ubuntu.cosmic:def:201983250000000
Revision Date:2019-06-17Version:1
Title:CVE-2019-8325 on Ubuntu 18.10 (cosmic) - medium.
Description:An issue was discovered in RubyGems 2.6 and later through 3.0.2. Since Gem::CommandManager#run calls alert_error without escaping, escape sequence injection is possible. (There are many ways to cause an error.)
Family:unixClass:vulnerability
Status:Reference(s):CVE-2019-8325
Platform(s):Ubuntu 18.10
Product(s):
Definition Synopsis
  • Ubuntu 18.10 (cosmic) is installed.
  • AND Package Information
  • jruby: while related to the CVE in some way, a decision has been made to ignore this issue (note: 'reached end-of-life').
  • OR ruby2.5 package in cosmic was vulnerable but has been fixed (note: '2.5.1-5ubuntu4.3').
    • BACK