Oval Definition:	oval:org.opensuse.security:def:51703
Revision Date: 2021-12-01 Version: 1 Title: Security update for ruby2.1 (Important) Description: This update for ruby2.1 fixes the following issues: - CVE-2020-25613: Fixed potential HTTP request smuggling in WEBrick (bsc#1177125). - CVE-2021-31799: Fixed Command injection vulnerability in RDoc (bsc#1190375). - CVE-2021-31810: Fixed trusting FTP PASV responses vulnerability in Net:FTP (bsc#1188161). - CVE-2021-32066: Fixed StartTLS stripping vulnerability in Net:IMAP (bsc#1188160). Family: unix Class: patch Status: Reference(s): 1024718 1027519 1046299 1050242 1050244 1051510 1055120 1055121 1055186 1058115 1060463 1061840 1065600 1065729 1068273 1078248 1079935 1082387 1082555 1082653 1083647 1085535 1086196 1086282 1086283 1086423 1087978 1088386 1089350 1090888 1091405 1091800 1094244 1097593 1097755 1100132 1102875 1102877 1102879 1102882 1102896 1103257 1103356 1103925 1104124 1104353 1104427 1104824 1104967 1105168 1105428 1106105 1106110 1106237 1106240 1106615 1106913 1107256 1107385 1107866 1108270 1108468 1109272 1109772 1109806 1110006 1110558 1110998 1111040 1111062 1111174 1111183 1111188 1111469 1111696 1111795 1111809 1111921 1112878 1112963 1113295 1113408 1113412 1113501 1113667 1113677 1113722 1113751 1113769 1113780 1113972 1114015 1114178 1114279 1114385 1114576 1114577 1114578 1114579 1114580 1114581 1114582 1114583 1114584 1114585 1114839 1114871 1115074 1115269 1115431 1115433 1115440 1115567 1115709 1115976 1116040 1116183 1116336 1116692 1116693 1116698 1116699 1116700 1116701 1116803 1116841 1116862 1116863 1116876 1116877 1116878 1116891 1116895 1116899 1116950 1117115 1117162 1117165 1117168 1117172 1117174 1117181 1117184 1117186 1117188 1117189 1117349 1117561 1117656 1117788 1117789 1117790 1117791 1117792 1117794 1117795 1117796 1117798 1117799 1117801 1117802 1117803 1117804 1117805 1117806 1117807 1117808 1117815 1117816 1117817 1117818 1117819 1117820 1117821 1117822 1117953 1118102 1118136 1118137 1118138 1118140 1118152 1118215 1118316 1118319 1118428 1118484 1118505 1118752 1118760 1118761 1118762 1118766 1118767 1118768 1118769 1118771 1118772 1118773 1118774 1118775 1118798 1118809 1118962 1119017 1119086 1119212 1119322 1119410 1119714 1119749 1119804 1119946 1119962 1119968 1120036 1120046 1120053 1120054 1120055 1120058 1120088 1120092 1120094 1120096 1120097 1120173 1120214 1120223 1120228 1120230 1120232 1120234 1120235 1120238 1120594 1120598 1120600 1120601 1120602 1120603 1120604 1120606 1120612 1120613 1120614 1120615 1120616 1120617 1120618 1120620 1120621 1120632 1120633 1120743 1120954 1121017 1121058 1121263 1121273 1121477 1121483 1121599 1121621 1121714 1121715 1121973 1123919 1134209 1140290 1141063 1153165 1153451 1153459 1154217 1154401 1156188 1170446 1172205 1173376 1173377 1173378 1173380 1173477 1173594 1176579 1177125 1188160 1188161 1190375 CVE-2006-0855 CVE-2007-1669 CVE-2007-5970 CVE-2008-7247 CVE-2009-0037 CVE-2009-2417 CVE-2009-4019 CVE-2009-4028 CVE-2009-4030 CVE-2010-5298 CVE-2012-5615 CVE-2013-0249 CVE-2013-1944 CVE-2013-1976 CVE-2013-1985 CVE-2013-2174 CVE-2013-4545 CVE-2014-0015 CVE-2014-0138 CVE-2014-0139 CVE-2014-0195 CVE-2014-0198 CVE-2014-0221 CVE-2014-0224 CVE-2014-2494 CVE-2014-3470 CVE-2014-3613 CVE-2014-3620 CVE-2014-3707 CVE-2014-4207 CVE-2014-4258 CVE-2014-4260 CVE-2014-4274 CVE-2014-4287 CVE-2014-6463 CVE-2014-6464 CVE-2014-6469 CVE-2014-6474 CVE-2014-6478 CVE-2014-6484 CVE-2014-6489 CVE-2014-6491 CVE-2014-6494 CVE-2014-6495 CVE-2014-6496 CVE-2014-6500 CVE-2014-6505 CVE-2014-6507 CVE-2014-6520 CVE-2014-6530 CVE-2014-6551 CVE-2014-6555 CVE-2014-6559 CVE-2014-6564 CVE-2014-6568 CVE-2014-8150 CVE-2014-8964 CVE-2015-0374 CVE-2015-0381 CVE-2015-0382 CVE-2015-0391 CVE-2015-0411 CVE-2015-0432 CVE-2015-0433 CVE-2015-0441 CVE-2015-0499 CVE-2015-0501 CVE-2015-0505 CVE-2015-2325 CVE-2015-2326 CVE-2015-2568 CVE-2015-2571 CVE-2015-2573 CVE-2015-3143 CVE-2015-3144 CVE-2015-3145 CVE-2015-3148 CVE-2015-3152 CVE-2015-3153 CVE-2015-4792 CVE-2015-4802 CVE-2015-4807 CVE-2015-4815 CVE-2015-4826 CVE-2015-4830 CVE-2015-4836 CVE-2015-4858 CVE-2015-4861 CVE-2015-4870 CVE-2015-4913 CVE-2015-5969 CVE-2015-8803 CVE-2015-8804 CVE-2015-8805 CVE-2016-0505 CVE-2016-0546 CVE-2016-0596 CVE-2016-0597 CVE-2016-0598 CVE-2016-0600 CVE-2016-0606 CVE-2016-0608 CVE-2016-0609 CVE-2016-0616 CVE-2016-0640 CVE-2016-0641 CVE-2016-0642 CVE-2016-0643 CVE-2016-0644 CVE-2016-0646 CVE-2016-0647 CVE-2016-0648 CVE-2016-0649 CVE-2016-0650 CVE-2016-0651 CVE-2016-0655 CVE-2016-0666 CVE-2016-0668 CVE-2016-2047 CVE-2016-3477 CVE-2016-3521 CVE-2016-3615 CVE-2016-3698 CVE-2016-5440 CVE-2016-6662 CVE-2017-18922 CVE-2018-12232 CVE-2018-14625 CVE-2018-16862 CVE-2018-16884 CVE-2018-18281 CVE-2018-18397 CVE-2018-18710 CVE-2018-19407 CVE-2018-19824 CVE-2018-19854 CVE-2018-19985 CVE-2018-20169 CVE-2018-9568 CVE-2019-13173 CVE-2019-14853 CVE-2019-14859 CVE-2019-17041 CVE-2019-17042 CVE-2019-18804 CVE-2020-0543 CVE-2020-1472 CVE-2020-15563 CVE-2020-15565 CVE-2020-15566 CVE-2020-15567 CVE-2020-25613 CVE-2020-8695 CVE-2020-8698 CVE-2021-31799 CVE-2021-31810 CVE-2021-32066 SUSE-SU-2019:0224-1 SUSE-SU-2019:2055-1 SUSE-SU-2019:2891-2 SUSE-SU-2019:2937-1 SUSE-SU-2019:3033-1 SUSE-SU-2019:3087-1 SUSE-SU-2020:1873-1 SUSE-SU-2020:1889-1 SUSE-SU-2020:2730-1 SUSE-SU-2020:3275-1 SUSE-SU-2021:3837-1 Platform(s): openSUSE Leap 15.0 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for additional PackageHub packages 15 SP2 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SUSE Linux Enterprise Module for Python2 packages 15 SP1 SUSE Linux Enterprise Module for Python2 packages 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Web Scripting 15 SP1 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND Package Information freerdp-2.0.0~rc2-lp150.1 is installed OR libfreerdp2-2.0.0~rc2-lp150.1 is installed OR libwinpr2-2.0.0~rc2-lp150.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information libpoppler-glib4-0.12.3-1.8 is installed OR libpoppler-qt4-3-0.12.3-1.8 is installed OR libpoppler5-0.12.3-1.8 is installed OR poppler-tools-0.12.3-1.8 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND fetchmail-6.3.8.90-13.20.21 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information libXinerama1-1.1.3-3 is installed OR libXinerama1-32bit-1.1.3-3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information curl-7.37.0-15 is installed OR libcurl4-7.37.0-15 is installed OR libcurl4-32bit-7.37.0-15 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information libhogweed2-2.7.1-9 is installed OR libhogweed2-32bit-2.7.1-9 is installed OR libnettle4-2.7.1-9 is installed OR libnettle4-32bit-2.7.1-9 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information avahi-0.6.32-30 is installed OR avahi-lang-0.6.32-30 is installed OR libavahi-client3-0.6.32-30 is installed OR libavahi-client3-32bit-0.6.32-30 is installed OR libavahi-common3-0.6.32-30 is installed OR libavahi-common3-32bit-0.6.32-30 is installed OR libavahi-core7-0.6.32-30 is installed OR libdns_sd-0.6.32-30 is installed OR libdns_sd-32bit-0.6.32-30 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information bind-utils-9.11.2-1 is installed OR libbind9-160-9.11.2-1 is installed OR libdns169-9.11.2-1 is installed OR libirs160-9.11.2-1 is installed OR libisc166-9.11.2-1 is installed OR libisc166-32bit-9.11.2-1 is installed OR libisccc160-9.11.2-1 is installed OR libisccfg160-9.11.2-1 is installed OR liblwres160-9.11.2-1 is installed OR python-bind-9.11.2-1 is installed Definition Synopsis SUSE Linux Enterprise Module for additional PackageHub packages 15 SP2 is installed AND Package Information python-ecdsa-0.13.3-3.3 is installed OR python2-ecdsa-0.13.3-3.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 is installed AND Package Information kernel-default-4.12.14-25.28 is installed OR kernel-default-base-4.12.14-25.28 is installed OR kernel-docs-4.12.14-25.28 is installed OR kernel-docs-html-4.12.14-25.28 is installed OR kernel-obs-qa-4.12.14-25.28 is installed OR kselftests-kmp-default-4.12.14-25.28 is installed Definition Synopsis SUSE Linux Enterprise Module for Python2 packages 15 SP1 is installed AND Package Information python-libxml2-python-2.9.7-3.12 is installed OR python2-libxml2-python-2.9.7-3.12 is installed Definition Synopsis SUSE Linux Enterprise Module for Python2 packages 15 SP2 is installed AND Package Information samba-4.11.13+git.189.e9bd318cd13-4.11 is installed OR samba-ad-dc-4.11.13+git.189.e9bd318cd13-4.11 is installed OR samba-dsdb-modules-4.11.13+git.189.e9bd318cd13-4.11 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 is installed AND Package Information rsyslog-8.33.1-3.22 is installed OR rsyslog-module-gssapi-8.33.1-3.22 is installed OR rsyslog-module-gtls-8.33.1-3.22 is installed OR rsyslog-module-mmnormalize-8.33.1-3.22 is installed OR rsyslog-module-mysql-8.33.1-3.22 is installed OR rsyslog-module-pgsql-8.33.1-3.22 is installed OR rsyslog-module-relp-8.33.1-3.22 is installed OR rsyslog-module-snmp-8.33.1-3.22 is installed OR rsyslog-module-udpspoof-8.33.1-3.22 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed AND Package Information xen-4.12.3_04-3.22 is installed OR xen-devel-4.12.3_04-3.22 is installed OR xen-tools-4.12.3_04-3.22 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 SP1 is installed AND Package Information nodejs8-8.15.1-3.17 is installed OR nodejs8-devel-8.15.1-3.17 is installed OR nodejs8-docs-8.15.1-3.17 is installed OR npm8-8.15.1-3.17 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information apache2-2.4.16-5 is installed OR apache2-doc-2.4.16-5 is installed OR apache2-example-pages-2.4.16-5 is installed OR apache2-prefork-2.4.16-5 is installed OR apache2-utils-2.4.16-5 is installed OR apache2-worker-2.4.16-5 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kgraft-patch-3_12_74-60_64_60-default-9-2 is installed OR kgraft-patch-3_12_74-60_64_60-xen-9-2 is installed OR kgraft-patch-SLE12-SP1_Update_21-9-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND libXxf86dga1-1.1.4-3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information libdcerpc-atsvc0-4.2.4-28.29 is installed OR samba-4.2.4-28.29 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information MozillaFirefox-52.8.1esr-109.34 is installed OR MozillaFirefox-devel-52.8.1esr-109.34 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information kgraft-patch-4_4_114-92_67-default-4-2 is installed OR kgraft-patch-SLE12-SP2_Update_19-4-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information cron-4.2-58 is installed OR cronie-1.4.11-58 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND Package Information libssh2-1-1.4.3-20.14 is installed OR libssh2-1-32bit-1.4.3-20.14 is installed OR libssh2_org-1.4.3-20.14 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND squid-3.5.21-26.17 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information libgcrypt-1.6.1-16.58 is installed OR libgcrypt20-1.6.1-16.58 is installed OR libgcrypt20-32bit-1.6.1-16.58 is installed OR libgcrypt20-hmac-1.6.1-16.58 is installed OR libgcrypt20-hmac-32bit-1.6.1-16.58 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND coolkey-1.1.0-148.3 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed AND Package Information libruby2_1-2_1-2.1.9-19.6.1 is installed OR ruby2.1-2.1.9-19.6.1 is installed OR ruby2.1-stdlib-2.1.9-19.6.1 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND ucode-intel-20201027-3.51 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP2 is installed AND Package Information LibVNCServer-0.9.10-4.19 is installed OR libvncclient0-0.9.10-4.19 is installed OR libvncserver0-0.9.10-4.19 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND Package Information curl-7.37.0-37.23 is installed OR libcurl4-7.37.0-37.23 is installed OR libcurl4-32bit-7.37.0-37.23 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND Package Information libmysqlclient18-10.0.38-29.27 is installed OR mariadb-10.0.38-29.27 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND Package Information libmysqlclient18-10.0.40.1-29.32 is installed OR mariadb-10.0.40.1-29.32 is installed
BACK