Oval Definition:
oval:org.opensuse.security:def:69758
Revision Date
:
2021-12-01
Version
:
1
Title
:
Security update for ruby2.5 (Important)
Description
:
This update for ruby2.5 fixes the following issues:
- CVE-2021-31799: Fixed Command injection vulnerability in RDoc (bsc#1190375). - CVE-2021-31810: Fixed trusting FTP PASV responses vulnerability in Net:FTP (bsc#1188161). - CVE-2021-32066: Fixed StartTLS stripping vulnerability in Net:IMAP (bsc#1188160).
Family
:
unix
Class
:
patch
Status
:
Reference(s)
:
1188160
1188161
1190375
CVE-2014-8564
CVE-2015-6251
CVE-2016-8610
CVE-2017-7869
CVE-2018-10844
CVE-2018-10845
CVE-2018-10846
CVE-2018-16301
CVE-2018-16868
CVE-2019-15165
CVE-2019-3829
CVE-2019-3836
CVE-2020-11501
CVE-2020-13777
CVE-2021-31799
CVE-2021-31810
CVE-2021-32066
SUSE-SU-2021:3838-1
Platform(s)
:
SUSE Linux Enterprise Module for Basesystem 15 SP2
SUSE Linux Enterprise Server 15 SP1-BCL
Product(s)
:
Definition Synopsis
SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed
AND
Package Information
gnutls-3.6.7-12 is installed
OR
libgnutls-devel-3.6.7-12 is installed
OR
libgnutls30-3.6.7-12 is installed
OR
libgnutls30-32bit-3.6.7-12 is installed
OR
libgnutls30-hmac-3.6.7-12 is installed
OR
libgnutls30-hmac-32bit-3.6.7-12 is installed
OR
libgnutlsxx-devel-3.6.7-12 is installed
OR
libgnutlsxx28-3.6.7-12 is installed
Definition Synopsis
SUSE Linux Enterprise Server 15 SP1-BCL is installed
AND
Package Information
libruby2_5-2_5-2.5.9-4.20.1 is installed
OR
ruby2.5-2.5.9-4.20.1 is installed
OR
ruby2.5-devel-2.5.9-4.20.1 is installed
OR
ruby2.5-devel-extra-2.5.9-4.20.1 is installed
OR
ruby2.5-stdlib-2.5.9-4.20.1 is installed
BACK