Updated ruby-nokogiri packages fix security vulnerability

🗓️ 22 May 2022 11:26:36Reported by Gentoo FoundationType

mageia

mageia🔗 advisories.mageia.org👁 42 Views

Updated fix for Nokogiri XML and HTML4 parser

Reporter	Title	Published	Views	Family All 109
IBM Security Bulletins	Security Bulletin: Mutiple Vulnerabilties Affecting Watson Machine Learning Accelerator on Cloud Pak for Data version	13 Nov 202315:22	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Logstash affect IBM Operations Analytics - Log Analysis (CVE-2022-29181, CVE-2022-23476)	12 Sep 202406:57	–	ibm
Amazon	Important: rubygem-nokogiri	6 Dec 202200:00	–	amazon
Tenable Nessus	Amazon Linux AMI : rubygem-nokogiri (ALAS-2022-1648)	10 Dec 202200:00	–	nessus
Tenable Nessus	GLSA-202208-29 : Nokogiri: Multiple Vulnerabilities	15 Aug 202200:00	–	nessus
Tenable Nessus	macOS 13.x < 13.1 Multiple Vulnerabilities (HT213532)	13 Dec 202200:00	–	nessus
Tenable Nessus	Photon OS 4.0: Rubygem PHSA-2025-4.0-0807	30 May 202500:00	–	nessus
Tenable Nessus	RHEL 8 : Satellite 6.12 Release (Important) (RHSA-2022:8506)	28 Apr 202400:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 Security Update : rubygem-nokogiri (SUSE-SU-2022:4015-1)	17 Nov 202200:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 Security Update : rubygem-nokogiri (SUSE-SU-2022:4016-1)	17 Nov 202200:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Mageia	8	any	ruby-nokogiri	1.11.7-1.1	ruby-nokogiri-1.11.7-1.1.noarch.rpm

Source	Link
bugs	www.bugs.mageia.org/show_bug.cgi
github	www.github.com/sparklemotion/nokogiri/security/advisories/GHSA-xh29-r2w5-wx8m
lists	www.lists.fedoraproject.org/archives/list/[email protected]/thread/4J4GGCK2IK6R7HJKHPGPCCZRBXEWHBVC/

22 May 2022 11:26Current

5.5Medium risk

Vulners AI Score5.5

CVSS 26.4

CVSS 3.18.2

EPSS0.04183

SSVC

nokogiri xml parser html4 security vulnerability memory access error patch untrusted input type-check unix