| Revision Date: | 2023-06-22 | Version: | 1 |
| Title: | CVE-2022-24836 |
| Description: |
Nokogiri is an open source XML and HTML library for Ruby. Nokogiri `< v1.13.4` contains an inefficient regular expression that is susceptible to excessive backtracking when attempting to detect encoding in HTML documents. Users are advised to upgrade to Nokogiri `>= 1.13.4`. There are no known workarounds for this issue.
|
| Family: | unix | Class: | vulnerability |
| Status: | | Reference(s): | Mitre CVE-2022-24836
SUSE CVE-2022-24836
SUSE-SU-2022:3890-1
SUSE-SU-2022:4015-1
SUSE-SU-2022:4016-1
|
| Platform(s): | openSUSE Tumbleweed
SUSE Linux Enterprise Desktop 15 SP3
SUSE Linux Enterprise Desktop 15 SP4
SUSE Linux Enterprise Desktop 15 SP5
SUSE Linux Enterprise High Performance Computing 15 SP3
SUSE Linux Enterprise High Performance Computing 15 SP4
SUSE Linux Enterprise High Performance Computing 15 SP5
SUSE Linux Enterprise Module for Basesystem 15 SP3
SUSE Linux Enterprise Module for Basesystem 15 SP4
SUSE Linux Enterprise Module for Basesystem 15 SP5
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server for SAP Applications 15 SP3
SUSE Linux Enterprise Server for SAP Applications 15 SP4
SUSE Linux Enterprise Server for SAP Applications 15 SP5
SUSE Linux Enterprise Storage 7.1
SUSE Manager Proxy 4.2
SUSE Manager Proxy 4.3
SUSE Manager Retail Branch Server 4.2
SUSE Manager Retail Branch Server 4.3
SUSE Manager Server 4.2
SUSE Manager Server 4.3
SUSE OpenStack Cloud Crowbar 8
SUSE OpenStack Cloud Crowbar 9
| Product(s): | |
| Definition Synopsis |
| Release Information SUSE Linux Enterprise Desktop 15 SP3 is installed
OR SUSE Linux Enterprise Desktop 15 SP4 is installed
OR SUSE Linux Enterprise High Performance Computing 15 SP3 is installed
OR SUSE Linux Enterprise High Performance Computing 15 SP4 is installed
OR SUSE Linux Enterprise Module for Basesystem 15 SP3 is installed
OR SUSE Linux Enterprise Module for Basesystem 15 SP4 is installed
OR SUSE Linux Enterprise Server 15 SP3 is installed
OR SUSE Linux Enterprise Server 15 SP4 is installed
OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed
OR SUSE Linux Enterprise Server for SAP Applications 15 SP4 is installed
OR SUSE Linux Enterprise Storage 7.1 is installed
OR SUSE Manager Proxy 4.2 is installed
OR SUSE Manager Proxy 4.3 is installed
OR SUSE Manager Retail Branch Server 4.2 is installed
OR SUSE Manager Retail Branch Server 4.3 is installed
OR SUSE Manager Server 4.2 is installed
OR SUSE Manager Server 4.3 is installed
AND ruby2.5-rubygem-nokogiri is affected
|
| Definition Synopsis |
| SUSE OpenStack Cloud Crowbar 8 is installed
AND ruby2.1-rubygem-nokogiri is affected
|
| Definition Synopsis |
| SUSE OpenStack Cloud Crowbar 9 is installed
AND ruby2.1-rubygem-nokogiri is affected
|
| Definition Synopsis |
| Release Information
SUSE Linux Enterprise Desktop 15 SP3 is installed
OR SUSE Linux Enterprise High Performance Computing 15 SP3 is installed
OR SUSE Linux Enterprise Module for Basesystem 15 SP3 is installed
OR SUSE Linux Enterprise Server 15 SP3 is installed
OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed
OR SUSE Linux Enterprise Storage 7.1 is installed
OR SUSE Manager Proxy 4.2 is installed
OR SUSE Manager Retail Branch Server 4.2 is installed
OR SUSE Manager Server 4.2 is installed
AND ruby2.5-rubygem-nokogiri is affected
|
| Definition Synopsis |
| openSUSE Tumbleweed is installed
AND ruby3.1-rubygem-nokogiri-1.13.4-1.1 is installed
|
| Definition Synopsis |
| Release Information
SUSE Linux Enterprise Desktop 15 SP4 is installed
OR SUSE Linux Enterprise High Performance Computing 15 SP4 is installed
OR SUSE Linux Enterprise Module for Basesystem 15 SP4 is installed
OR SUSE Linux Enterprise Server 15 SP4 is installed
OR SUSE Linux Enterprise Server for SAP Applications 15 SP4 is installed
OR SUSE Manager Proxy 4.3 is installed
OR SUSE Manager Retail Branch Server 4.3 is installed
OR SUSE Manager Server 4.3 is installed
AND ruby2.5-rubygem-nokogiri is affected
|
| Definition Synopsis |
| Release Information
SUSE Linux Enterprise Desktop 15 SP5 is installed
OR SUSE Linux Enterprise High Performance Computing 15 SP5 is installed
OR SUSE Linux Enterprise Module for Basesystem 15 SP5 is installed
OR SUSE Linux Enterprise Server 15 SP5 is installed
OR SUSE Linux Enterprise Server for SAP Applications 15 SP5 is installed
AND ruby2.5-rubygem-nokogiri-1.8.5-150400.14.3.1 is installed
|