Vulnerability CVE-2009-1904

Vulnerability Name:

CVE-2009-1904 (CCN-51032)

Assigned:

2009-06-10

Published:

2009-06-10

Updated:

2017-09-29

Summary:

The BigDecimal library in Ruby 1.8.6 before p369 and 1.8.7 before p173 allows context-dependent attackers to cause a denial of service (application crash) via a string argument that represents a large number, as demonstrated by an attempted conversion to the Float data type.

CVSS v3 Severity:

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Low

CVSS v2 Severity:

5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
3.7 Low (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

5.0 Medium (REDHAT CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
3.7 Low (REDHAT Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

Vulnerability Type:

CWE-189

Vulnerability Consequences:

Denial of Service

References:

Source: CONFIRM
Type: Patch
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=532689

Source: CONFIRM
Type: UNKNOWN
http://bugs.gentoo.org/show_bug.cgi?id=273213

Source: MITRE
Type: CNA
CVE-2009-1904

Source: CONFIRM
Type: Patch
http://github.com/NZKoz/bigdecimal-segfault-fix/tree/master

Source: MLIST
Type: UNKNOWN
[rubyonrails-security] 20090610 DoS Vulnerability in Ruby (CVE-2009-1904)

Source: APPLE
Type: UNKNOWN
APPLE-SA-2010-03-29-1

Source: MLIST
Type: UNKNOWN
[pkgsrc-changes] 20090610 CVS commit: pkgsrc/lang/ruby18-base

Source: OSVDB
Type: UNKNOWN
55031

Source: CCN
Type: Ruby Redmine Bug #794
BigDecimal Segmentation fault

Source: CONFIRM
Type: Exploit, Patch
http://redmine.ruby-lang.org/issues/show/794

Source: CCN
Type: RHSA-2009-1140
Moderate: ruby security update

Source: CCN
Type: SA35399
Ruby BigDecimal Denial of Service Vulnerability

Source: SECUNIA
Type: Vendor Advisory
35399

Source: SECUNIA
Type: UNKNOWN
35527

Source: SECUNIA
Type: UNKNOWN
35593

Source: SECUNIA
Type: UNKNOWN
35699

Source: SECUNIA
Type: UNKNOWN
35937

Source: SECUNIA
Type: UNKNOWN
37705

Source: GENTOO
Type: UNKNOWN
GLSA-200906-02

Source: CCN
Type: SECTRACK ID: 1022371
Ruby BigDecimal Conversion Bug May Let Remote Users Deny Service

Source: SLACKWARE
Type: UNKNOWN
SSA:2009-170-02

Source: CCN
Type: Apple Web site
About the security content of Security Update 2010-002 / Mac OS X v10.6.3

Source: CONFIRM
Type: UNKNOWN
http://support.apple.com/kb/HT4077

Source: CCN
Type: ASA-2009-262
ruby security update (RHSA-2009-1140)

Source: CONFIRM
Type: Patch
http://weblog.rubyonrails.org/2009/6/10/dos-vulnerability-in-ruby/

Source: DEBIAN
Type: DSA-1860
ruby1.9 -- several vulnerabilities

Source: CCN
Type: GLSA-200906-02
Ruby: Denial of Service

Source: MANDRIVA
Type: UNKNOWN
MDVSA-2009:160

Source: CCN
Type: OSVDB ID: 55031
Ruby BigDecimal Library Float Data Type Conversion String Argument Handling DoS

Source: REDHAT
Type: UNKNOWN
RHSA-2009:1140

Source: CONFIRM
Type: UNKNOWN
http://www.ruby-forum.com/topic/189071

Source: CCN
Type: Ruby Programming Language Web site
DoS vulnerability in BigDecimal

Source: CONFIRM
Type: Patch, Vendor Advisory
http://www.ruby-lang.org/en/news/2009/06/09/dos-vulnerability-in-bigdecimal/

Source: BID
Type: UNKNOWN
35278

Source: CCN
Type: BID-35278
Ruby BigDecimal Library Denial Of Service Vulnerability

Source: SECTRACK
Type: UNKNOWN
1022371

Source: CCN
Type: USN-805-1
Ruby vulnerabilities

Source: UBUNTU
Type: UNKNOWN
USN-805-1

Source: CCN
Type: USN-900-1
Ruby vulnerabilities

Source: VUPEN
Type: UNKNOWN
ADV-2009-1563

Source: CONFIRM
Type: UNKNOWN
https://bugs.launchpad.net/bugs/385436

Source: CONFIRM
Type: UNKNOWN
https://bugs.launchpad.net/bugs/cve/2009-1904

Source: XF
Type: UNKNOWN
ruby-bigdecimal-dos(51032)

Source: XF
Type: UNKNOWN
ruby-bigdecimal-dos(51032)

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:9780

Source: FEDORA
Type: UNKNOWN
FEDORA-2009-13066

Source: SUSE
Type: SUSE-SA:2009:037
dhcp-client security problem

Vulnerable Configuration:

Configuration 1:

cpe:/a:ruby-lang:ruby:1.8.6:*:*:*:*:*:*:*

OR cpe:/a:ruby-lang:ruby:1.8.7:*:*:*:*:*:*:*

Configuration RedHat 1:

cpe:/o:redhat:enterprise_linux:4:*:*:*:*:*:*:*

Configuration RedHat 2:

cpe:/o:redhat:enterprise_linux:4::as:*:*:*:*:*

Configuration RedHat 3:

cpe:/o:redhat:enterprise_linux:4::desktop:*:*:*:*:*

Configuration RedHat 4:

cpe:/o:redhat:enterprise_linux:4::es:*:*:*:*:*

Configuration RedHat 5:

cpe:/o:redhat:enterprise_linux:4::ws:*:*:*:*:*

Configuration RedHat 6:

cpe:/o:redhat:enterprise_linux:5:*:*:*:*:*:*:*

Configuration RedHat 7:

cpe:/o:redhat:enterprise_linux:5::client:*:*:*:*:*

Configuration RedHat 8:

cpe:/o:redhat:enterprise_linux:5::client_workstation:*:*:*:*:*

Configuration RedHat 9:

cpe:/o:redhat:enterprise_linux:5::server:*:*:*:*:*

Configuration CCN 1:

cpe:/a:ruby-lang:ruby:1.8.2:*:*:*:*:*:*:*

OR cpe:/a:ruby-lang:ruby:1.8.5:*:*:*:*:*:*:*

OR cpe:/a:ruby-lang:ruby:1.8.6:*:*:*:*:*:*:*

OR cpe:/a:ruby-lang:ruby:1.8:*:*:*:*:*:*:*

OR cpe:/a:ruby-lang:ruby:1.8.7:*:*:*:*:*:*:*

OR cpe:/a:ruby-lang:ruby:1.8.7:p71:*:*:*:*:*:*

OR cpe:/a:ruby-lang:ruby:1.8.4:*:*:*:*:*:*:*

OR cpe:/a:ruby-lang:ruby:1.8.3:*:*:*:*:*:*:*

OR cpe:/a:ruby-lang:ruby:1.8.6:p287:*:*:*:*:*:*

OR cpe:/a:ruby-lang:ruby:1.8.7:p72:*:*:*:*:*:*

OR cpe:/a:ruby-lang:ruby:1.8.6:p114:*:*:*:*:*:*

OR cpe:/a:ruby-lang:ruby:1.8.6:p230:*:*:*:*:*:*

OR cpe:/a:ruby-lang:ruby:1.8.6:p286:*:*:*:*:*:*

OR cpe:/a:ruby-lang:ruby:1.8.7:p22:*:*:*:*:*:*

OR cpe:/a:ruby-lang:ruby:1.8.5:p115:*:*:*:*:*:*

OR cpe:/a:ruby-lang:ruby:1.8.5:p231:*:*:*:*:*:*

OR cpe:/a:ruby-lang:ruby:1.8.1:*:*:*:*:*:*:*

OR cpe:/a:ruby-lang:ruby:1.8.2:preview2:*:*:*:*:*:*

OR cpe:/a:ruby-lang:ruby:1.8.2:preview3:*:*:*:*:*:*

OR cpe:/a:ruby-lang:ruby:1.8.2:preview4:*:*:*:*:*:*

OR cpe:/a:ruby-lang:ruby:1.8.2:preview1:*:*:*:*:*:*

AND

cpe:/o:gentoo:linux:*:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:4::as:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:4::desktop:*:*:*:*:*

OR cpe:/o:novell:linux_desktop:9:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:4::es:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:4::ws:*:*:*:*:*

OR cpe:/o:canonical:ubuntu:6.06::lts:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:4.0:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:4.0::x86_64:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:3.0::x86_64:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:5:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:5:*:client_workstation:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:2008.0::x86-64:*:*:*:*:*

OR cpe:/o:debian:debian_linux:4.0:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:5:*:client:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:2008.0:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:2008.1:x86_64:*:*:*:*:*:*

OR cpe:/a:novell:open_enterprise_server:*:*:*:*:*:*:*:*

OR cpe:/o:opensuse:opensuse:10.3:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:2008.1:*:*:*:*:*:*:*

OR cpe:/o:canonical:ubuntu:8.04::lts:*:*:*:*:*

OR cpe:/o:opensuse:opensuse:11.0:*:*:*:*:*:*:*

OR cpe:/o:novell:suse_linux_enterprise_server:10:sp2:itanium_ia64:*:*:*:*:*

OR cpe:/o:mandriva:linux:2009.0:*:*:*:*:*:*:*

OR cpe:/o:mandriva:linux:2009.0:-:x86_64:*:*:*:*:*

OR cpe:/o:debian:debian_linux:5.0:*:*:*:*:*:*:*

OR cpe:/o:mandriva:linux:2009.1:*:*:*:*:*:*:*

OR cpe:/o:mandriva:linux:2009.1:*:*:*:x86_64:*:*:*

OR cpe:/o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.6:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.6:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.6.2:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.6.2:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20091904	V	CVE-2009-1904	2022-05-20
oval:org.opensuse.security:def:42436	P	Security update for expat (Important)	2022-04-19
oval:org.opensuse.security:def:31756	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:31755	P	Security update for libvirt (Important)	2022-01-10
oval:org.opensuse.security:def:31373	P	Security update for net-snmp (Important)	2022-01-05
oval:org.opensuse.security:def:26180	P	Security update for php74 (Moderate)	2021-12-06
oval:org.opensuse.security:def:31715	P	Security update for the Linux Kernel (Important)	2021-12-06
oval:org.opensuse.security:def:26179	P	Security update for gmp (Moderate)	2021-12-02
oval:org.opensuse.security:def:31713	P	Security update for clamav (Moderate)	2021-12-01
oval:org.opensuse.security:def:31299	P	Security update for qemu (Important)	2021-11-10
oval:org.opensuse.security:def:32210	P	Security update for opensc (Important)	2021-10-29
oval:org.opensuse.security:def:26155	P	Security update for cairo (Low)	2021-10-22
oval:org.opensuse.security:def:32209	P	Security update for postgresql10 (Important)	2021-10-20
oval:org.opensuse.security:def:31287	P	Security update for the Linux Kernel (Live Patch 40 for SLE 12 SP3) (Important)	2021-10-18
oval:org.opensuse.security:def:31288	P	Security update for the Linux Kernel (Live Patch 36 for SLE 12 SP3) (Important)	2021-10-18
oval:org.opensuse.security:def:42227	P	Security update for rpm (Important)	2021-10-15
oval:org.opensuse.security:def:29431	P	Security update for webkit2gtk3 (Important)	2021-10-06
oval:org.opensuse.security:def:26123	P	Security update for openssl-1_0_0 (Low)	2021-09-09
oval:org.opensuse.security:def:32992	P	Security update for gstreamer-plugins-good (Moderate)	2021-09-02
oval:org.opensuse.security:def:26115	P	Security update for libesmtp (Important)	2021-09-02
oval:org.opensuse.security:def:26104	P	Security update for libcares2 (Important)	2021-08-16
oval:org.opensuse.security:def:32161	P	Security update for cpio (Important)	2021-08-14
oval:org.opensuse.security:def:26103	P	Security update for the Linux Kernel (Important)	2021-08-10
oval:org.opensuse.security:def:26102	P	Security update for php72 (Important)	2021-08-06
oval:org.opensuse.security:def:31654	P	Security update for MozillaFirefox (Important)	2021-07-16
oval:org.opensuse.security:def:26088	P	Security update for the Linux Kernel (Important)	2021-07-14
oval:org.opensuse.security:def:32953	P	Security update for ovmf (Important)	2021-06-22
oval:org.opensuse.security:def:32122	P	Security update for apache2 (Important)	2021-06-17
oval:org.opensuse.security:def:42696	P	ruby-1.8.7.p357-0.9.17.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36289	P	ruby-1.8.7.p357-0.9.17.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36554	P	ruby-devel-1.8.7.p357-0.9.17.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:31191	P	Security update for gstreamer-plugins-bad (Important)	2021-06-07
oval:org.opensuse.security:def:32105	P	Security update for the Linux Kernel (Live Patch 34 for SLE 12 SP3) (Important)	2021-06-04
oval:org.opensuse.security:def:32107	P	Security update for the Linux Kernel (Live Patch 32 for SLE 12 SP3) (Important)	2021-06-04
oval:org.opensuse.security:def:26049	P	Security update for lz4 (Important)	2021-05-14
oval:org.opensuse.security:def:26042	P	Security update for cups (Important)	2021-04-30
oval:org.opensuse.security:def:32063	P	Security update for the Linux Kernel (Live Patch 35 for SLE 12 SP3) (Important)	2021-04-07
oval:org.opensuse.security:def:32065	P	Security update for the Linux Kernel (Live Patch 37 for SLE 12 SP3) (Important)	2021-04-07
oval:org.opensuse.security:def:26208	P	Security update for git (Important)	2021-03-09
oval:org.opensuse.security:def:31741	P	Security update for wpa_supplicant (Important)	2021-03-09
oval:org.opensuse.security:def:32271	P	Security update for git (Important)	2021-03-09
oval:org.opensuse.security:def:29467	P	Security update for openvswitch (Important)	2021-02-12
oval:org.opensuse.security:def:32239	P	Security update for the Linux Kernel (Live Patch 35 for SLE 12 SP3) (Important)	2021-02-10
oval:org.opensuse.security:def:32249	P	Security update for the Linux Kernel (Live Patch 31 for SLE 12 SP3) (Important)	2021-02-10
oval:org.opensuse.security:def:31323	P	Security update for the Linux Kernel (Live Patch 35 for SLE 12 SP3) (Important)	2021-02-10
oval:org.opensuse.security:def:26146	P	Security update for python3 (Important)	2021-02-08
oval:org.opensuse.security:def:32020	P	Security update for cyrus-sasl (Important)	2020-12-28
oval:org.opensuse.security:def:32019	P	Security update for clamav (Important)	2020-12-22
oval:org.opensuse.security:def:35820	P	ruby-1.8.7.p357-0.7.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:31559	P	Security update for gdm (Important)	2020-12-03
oval:org.opensuse.security:def:42044	P	ruby-1.8.7.p72-5.24.2 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:36029	P	ruby-1.8.7.p357-0.9.9.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:32002	P	Security update for gdm (Important)	2020-12-03
oval:org.opensuse.security:def:35637	P	ruby-1.8.7.p72-5.24.2 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:25189	P	Security update for ucode-intel (Moderate)	2020-12-01
oval:org.opensuse.security:def:32421	P	Security update for wireshark (Moderate)	2020-12-01
oval:org.opensuse.security:def:32531	P	ipsec-tools on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25914	P	Security update for firebird (Moderate)	2020-12-01
oval:org.opensuse.security:def:25920	P	Security update for gstreamer-plugins-base (Moderate)	2020-12-01
oval:org.opensuse.security:def:26310	P	Security update for Cloud Compute 12 (Moderate)	2020-12-01
oval:org.opensuse.security:def:26819	P	ruby on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31415	P	Security update for php53 (Moderate)	2020-12-01
oval:org.opensuse.security:def:28592	P	Security update for openssl-certs	2020-12-01
oval:org.opensuse.security:def:28733	P	Security update for kvm (Important)	2020-12-01
oval:org.opensuse.security:def:25200	P	Security update for java-1_8_0-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:32470	P	Security update for xorg-x11-server (Important)	2020-12-01
oval:org.opensuse.security:def:32575	P	log4net on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26004	P	Security update for shotwell (Moderate)	2020-12-01
oval:org.opensuse.security:def:26257	P	Security update for icu (Moderate)	2020-12-01
oval:org.opensuse.security:def:26354	P	Security update for chromium (Important)	2020-12-01
oval:org.opensuse.security:def:31495	P	Security update for Python	2020-12-01
oval:org.opensuse.security:def:31472	P	Security update for ppp (Important)	2020-12-01
oval:org.opensuse.security:def:31771	P	Security update for MozillaFirefox, MozillaFirefox-branding-SLED, firefox-gcc5, mozilla-nss (Important)	2020-12-01
oval:org.opensuse.security:def:31881	P	Security update for dnsmasq (Important)	2020-12-01
oval:org.opensuse.security:def:25370	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:25264	P	Security update for memcached (Moderate)	2020-12-01
oval:org.opensuse.security:def:32332	P	Security update for samba (Important)	2020-12-01
oval:org.opensuse.security:def:32632	P	apache2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:32509	P	fetchmail on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33213	P	nfs-client on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26296	P	Security update for ImageMagick (Moderate)	2020-12-01
oval:org.opensuse.security:def:26992	P	mozilla-xulrunner192 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31496	P	Security update for python-imaging	2020-12-01
oval:org.opensuse.security:def:31505	P	Security update for python27 (Moderate)	2020-12-01
oval:org.opensuse.security:def:31820	P	Security update for augeas (Moderate)	2020-12-01
oval:org.opensuse.security:def:31925	P	Security update for ghostscript-library (Important)	2020-12-01
oval:org.opensuse.security:def:25371	P	Security update for python-ipaddress (Important)	2020-12-01
oval:org.opensuse.security:def:25392	P	Security update for samba (Important)	2020-12-01
oval:org.opensuse.security:def:32389	P	Security update for tomcat6 (Important)	2020-12-01
oval:org.opensuse.security:def:32688	P	kde4-kgreeter-plugins on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:32798	P	tgt on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33252	P	ruby on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:28009	P	Security update for apache2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:26468	P	Security update for go1.9 (Moderate)	2020-12-01
oval:org.opensuse.security:def:26570	P	kdebase3-runtime on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27027	P	ruby on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31507	P	Security update for python27 (Moderate)	2020-12-01
oval:org.opensuse.security:def:31597	P	Security update for tiff (Moderate)	2020-12-01
oval:org.opensuse.security:def:31859	P	Security update for curl (Moderate)	2020-12-01
oval:org.opensuse.security:def:32563	P	libpulse-browse0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25382	P	Security update for squid (Critical)	2020-12-01
oval:org.opensuse.security:def:25473	P	Security update for strongswan (Important)	2020-12-01
oval:org.opensuse.security:def:32476	P	Security update for yast2-storage (Moderate)	2020-12-01
oval:org.opensuse.security:def:32737	P	libvorbis on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:32842	P	cups on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:28010	P	Security update for apache2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:26307	P	Security update for conntrack-tools (Moderate)	2020-12-01
oval:org.opensuse.security:def:26264	P	Security update for gegl (Moderate)	2020-12-01
oval:org.opensuse.security:def:26517	P	NetworkManager-gnome on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26614	P	mozilla-xulrunner190 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31581	P	Security update for tar (Moderate)	2020-12-01
oval:org.opensuse.security:def:31953	P	Security update for gstreamer-0_10-plugins-base (Moderate)	2020-12-01
oval:org.opensuse.security:def:32602	P	ruby on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25578	P	Security update for python-ipaddress (Important)	2020-12-01
oval:org.opensuse.security:def:25446	P	Security update for nfs-utils (Moderate)	2020-12-01
oval:org.opensuse.security:def:25530	P	Security update for virglrenderer (Important)	2020-12-01
oval:org.opensuse.security:def:25818	P	Security update for flash-player (Important)	2020-12-01
oval:org.opensuse.security:def:32776	P	python on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33480	P	Security update for libneon	2020-12-01
oval:org.opensuse.security:def:28021	P	Security update for bind (Important)	2020-12-01
oval:org.opensuse.security:def:26388	P	Security update for irssi (Moderate)	2020-12-01
oval:org.opensuse.security:def:26415	P	Security update for python-Django (Moderate)	2020-12-01
oval:org.opensuse.security:def:26556	P	gmime on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27252	P	openslp on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25579	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:25574	P	Security update for MozillaFirefox (Moderate)	2020-12-01
oval:org.opensuse.security:def:25614	P	Security update for perl-DBI (Important)	2020-12-01
oval:org.opensuse.security:def:25867	P	Security update for flash-player (Critical)	2020-12-01
oval:org.opensuse.security:def:25964	P	Security update for libraw (Moderate)	2020-12-01
oval:org.opensuse.security:def:33519	P	Security update for ruby	2020-12-01
oval:org.opensuse.security:def:31105	P	Security update for kernel-source (Important)	2020-12-01
oval:org.opensuse.security:def:28085	P	Security update for gd (Moderate)	2020-12-01
oval:org.opensuse.security:def:26445	P	Security update for chromium (Important)	2020-12-01
oval:org.opensuse.security:def:26733	P	lcms on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26835	P	unrar on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27287	P	ruby on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31767	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:31805	P	Security update for apache2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:31897	P	Security update for MozillaFirefox, mozilla-nspr, mozilla-nss (Important)	2020-12-01
oval:org.opensuse.security:def:32041	P	Security update for krb5 (Important)	2020-12-01
oval:org.opensuse.security:def:32745	P	lvm2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25590	P	Security update for dovecot22 (Important)	2020-12-01
oval:org.opensuse.security:def:25655	P	Security update for spice (Moderate)	2020-12-01
oval:org.opensuse.security:def:25765	P	Security update for Adobe Flash Player (Important)	2020-12-01
oval:org.opensuse.security:def:25906	P	Security update for sane-backends (Moderate)	2020-12-01
oval:org.opensuse.security:def:26602	P	libsndfile on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31106	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:28215	P	Security update for libpng12-0 (Moderate)	2020-12-01
oval:org.opensuse.security:def:26529	P	cifs-mount on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26782	P	man on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26879	P	cvs on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31841	P	Security update for bzip2 (Important)	2020-12-01
oval:org.opensuse.security:def:31862	P	Security update for curl (Moderate)	2020-12-01
oval:org.opensuse.security:def:32784	P	ruby on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25838	P	Security update for flash-player (Important)	2020-12-01
oval:org.opensuse.security:def:25654	P	Security update for samba (Important)	2020-12-01
oval:org.opensuse.security:def:25712	P	Security update for python36 (Moderate)	2020-12-01
oval:org.opensuse.security:def:26000	P	Security update for ImageMagick (Moderate)	2020-12-01
oval:org.opensuse.security:def:26637	P	ruby on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31117	P	Security update for krb5 (Important)	2020-12-01
oval:org.opensuse.security:def:28299	P	Security update for netatalk (Important)	2020-12-01
oval:org.opensuse.security:def:26680	P	cups on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26821	P	squid3 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27517	P	mozilla-nss-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31973	P	Security update for jakarta-taglibs-standard (Important)	2020-12-01
oval:org.opensuse.security:def:31949	P	Security update for grub2 (Important)	2020-12-01
oval:org.opensuse.security:def:32315	P	Security update for rsync (Moderate)	2020-12-01
oval:org.opensuse.security:def:25839	P	Security update for gimp (Moderate)	2020-12-01
oval:org.opensuse.security:def:25782	P	Security update for evolution-data-server (Moderate)	2020-12-01
oval:org.opensuse.security:def:25796	P	Security update for util-linux (Moderate)	2020-12-01
oval:org.opensuse.security:def:28356	P	Security update for poppler (Moderate)	2020-12-01
oval:org.opensuse.security:def:28645	P	Security update for compat-openssl097g	2020-12-01
oval:org.opensuse.security:def:28749	P	Security update for lzo	2020-12-01
oval:org.opensuse.security:def:27552	P	ruby-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25188	P	Security update for texlive (Moderate)	2020-12-01
oval:org.opensuse.security:def:32031	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:32365	P	Security update for supportutils (Moderate)	2020-12-01
oval:org.opensuse.security:def:25850	P	Security update for libreoffice (Low)	2020-12-01
oval:org.opensuse.security:def:25863	P	Security update for ImageMagick (Moderate)	2020-12-01
oval:org.opensuse.security:def:25947	P	Security update for freerdp (Important)	2020-12-01
oval:org.opensuse.security:def:26784	P	mono-core on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:28440	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:28694	P	Security update for giflib (Moderate)	2020-12-01
oval:org.opensuse.security:def:28793	P	Security update for libX11 (Moderate)	2020-12-01
oval:org.mitre.oval:def:29258	P	RHSA-2009:1140 -- ruby security update (Moderate)	2015-08-17
oval:org.mitre.oval:def:13411	P	USN-805-1 -- ruby1.8, ruby1.9 vulnerabilities	2014-07-07
oval:org.mitre.oval:def:13671	P	USN-900-1 -- ruby1.9 vulnerabilities	2014-06-30
oval:org.mitre.oval:def:13540	P	DSA-1860-1 ruby1.8, ruby1.9 -- several	2014-06-23
oval:org.mitre.oval:def:7853	P	DSA-1860 ruby1.8, ruby1.9 -- several vulnerabilities	2014-06-23
oval:org.mitre.oval:def:22900	P	ELSA-2009:1140: ruby security update (Moderate)	2014-05-26
oval:org.mitre.oval:def:9780	V	The BigDecimal library in Ruby 1.8.6 before p369 and 1.8.7 before p173 allows context-dependent attackers to cause a denial of service (application crash) via a string argument that represents a large number, as demonstrated by an attempted conversion to the Float data type.	2013-04-29
oval:org.debian:def:1860	V	several vulnerabilities	2009-08-12
oval:com.redhat.rhsa:def:20091140	P	RHSA-2009:1140: ruby security update (Moderate)	2009-07-02

BACK