Oval Definition:
oval:com.ubuntu.disco:def:201983210000000
Revision Date
:
2019-06-17
Version
:
1
Title
:
CVE-2019-8321 on Ubuntu 19.04 (disco) - medium.
Description
:
An issue was discovered in RubyGems 2.6 and later through 3.0.2. Since Gem::UserInteraction#verbose calls say without escaping, escape sequence injection is possible.
Family
:
unix
Class
:
vulnerability
Status
:
Reference(s)
:
CVE-2019-8321
Platform(s)
:
Ubuntu 19.04
Product(s)
:
Definition Synopsis
Ubuntu 19.04 (disco) is installed.
AND
Package Information
jruby package in disco is affected and needs fixing.
OR
ruby2.5 package in disco was vulnerable but has been fixed (note: '2.5.5-1').
BACK