RHEL 6 / 7 : rh-ruby24-ruby (RHSA-2018:3730)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:3730 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...

SUSE CVE-2018-1000079

RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Directory Traversal vulnerability in gem installation that can result in the gem could write to...

com.github.lodsve:lodsve-amqp (>=2.5.7, <=2.5.10), com.github.lodsve:lodsve-cache (>=2.5.7, <=2.5.10) +20 more potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.26)

org.jruby:jruby-stdlib MAVEN version 1.7.26 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.github.lodsve:lodsve-amqp =2.5.7, =2.5.7, =2.5.7, =2.5.7, =2.5.7, =2.5.7, =2.5.7, =2.5.7, =2.5.7, =2.5.7,...

org.jruby:jruby-core (1.7.1) potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.1)

org.jruby:jruby-stdlib MAVEN version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.jruby:jruby-core 1.7.1 Source cves: CVE-2018-1000079 Source advisory: OSV:GHSA-8QXG-MFF5-J3WC...

com.github.automately:automately-core (>=1.8.6, <=1.11.1), org.jruby:jruby (1.7.14) +8 more potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.14)

org.jruby:jruby-stdlib MAVEN version 1.7.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.github.automately:automately-core =1.8.6, =1.7.7, =1.7.7, =2.1.15, =2.1.15, =2.4.0, =2.1.15, =2.5.4 Source cve...

com.buschmais.jqassistant.cli:application (1.4.0), com.buschmais.jqassistant.cli:jqassistant-commandline-neo4jv2 (1.4.0) +41 more potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.27)

org.jruby:jruby-stdlib MAVEN version 1.7.27 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.buschmais.jqassistant.cli:application 1.4.0 - com.buschmais.jqassistant.cli:jqassistant-commandline-neo4jv2...

org.ocpsoft.rewrite:rewrite-distribution (>=2.0.0.alpha2, <=2.0.0.alpha6), org.ocpsoft.rewrite:rewrite-transform-markup (>=1.1.0.final, <=2.0.0.alpha6) potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.6.7.2)

org.jruby:jruby-stdlib MAVEN version 1.6.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.ocpsoft.rewrite:rewrite-distribution =2.0.0.alpha2, =1.1.0.final, =2.0.0.alpha6 Source cves: CVE-2018-1000079...

com.buschmais.jqassistant.core:jqassistant.core.analysis (>=1.0.0-rc1, <=1.0.0), com.buschmais.jqassistant.core:jqassistant.core.plugin (>=1.0.0-rc1, <=1.0.0) +35 more potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.18)

org.jruby:jruby-stdlib MAVEN version 1.7.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.buschmais.jqassistant.core:jqassistant.core.analysis =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc...

org.jruby:jruby (1.7.25), org.jruby:jruby-complete (1.7.25) +1 more potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.25)

org.jruby:jruby-stdlib MAVEN version 1.7.25 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.jruby:jruby 1.7.25 - org.jruby:jruby-complete 1.7.25 - org.jruby:jruby-noasm 1.7.25 Source cves:...

Mageia: Security Advisory (MGASA-2019-0062)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2019:1804-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2020-2395)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2020-1195)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization for ARM 64 3.0.2.0 : ruby (EulerOS-SA-2020-1195)

According to the versions of the ruby packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through...

Moderate: Red Hat Security Advisory: ruby security update

An update for ruby is now available for Red Hat Enterprise Linux 7.5 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

RHEL 7 : ruby (RHSA-2020:0542)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0542 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...

NewStart CGSL CORE 5.05 / MAIN 5.05 : ruby Multiple Vulnerabilities (NS-SA-2019-0245)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has ruby packages installed that are affected by multiple vulnerabilities: - In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1, an attacker controlling the unpacking format...

CVE-2018-1000079

RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Directory Traversal vulnerability in gem installation that can result in the gem could write to...

openSUSE Security Update : ruby-bundled-gems-rpmhelper / ruby2.5 (openSUSE-2019-1771)

This update for ruby2.5 and ruby-bundled-gems-rpmhelper fixes the following issues : Changes in ruby2.5 : Update to 2.5.5 and 2.5.4 : https://www.ruby-lang.org/en/news/2019/03/15/ruby-2-5-5-released/ https://www.ruby-lang.org/en/news/2019/03/13/ruby-2-5-4-released/ Security issues fixed : -...

SUSE SLED15 / SLES15 Security Update : ruby-bundled-gems-rpmhelper, ruby2.5 (SUSE-SU-2019:1804-1)

This update for ruby2.5 and ruby-bundled-gems-rpmhelper fixes the following issues : Changes in ruby2.5 : Update to 2.5.5 and 2.5.4 : https://www.ruby-lang.org/en/news/2019/03/15/ruby-2-5-5-released/ https://www.ruby-lang.org/en/news/2019/03/13/ruby-2-5-4-released/ Security issues fixed :...