EulerOS 2.0 SP8 : ruby (EulerOS-SA-2022-1951)

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS regular expression Denial of Service via a long string. The fixed versions are 3.2....

CVE-2022-30123

A flaw was found in ruby gem-rack. This flaw allows a malicious actor to craft requests that can cause shell escape sequences to be written to the terminal via rack's Lint middleware and CommonLogger middleware. This issue can leverage these escape sequences to execute commands in the victim's...

CVE-2022-30122

A denial of service flaw was found in ruby-rack. An attacker crafting multipart POST requests can cause Rack's multipart parser to take much longer than expected, leading to a denial of service...

Malicious code in sageone_api_ruby_sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67c460c228e823f0c5c8ff20c43b3bea00ea76438eb77c1f2d539619b7354d2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3468 Malicious code in grpc-web-ruby (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38627d9ef2413df056c1a97312ac256a8931cc3a6626adc0c8221b1d8abb65a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grpc-web-ruby (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38627d9ef2413df056c1a97312ac256a8931cc3a6626adc0c8221b1d8abb65a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ruby-on-rails-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34c450a4a909b2cff0881264fc0cacab1b54bdb89064e08b2c17d897a4cfc2dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in svgo-ruby (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 257abcb42a660a670b62862d4d341a46aad586177317711f9ff04dd75be63d62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6371 Malicious code in svgo-ruby (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 257abcb42a660a670b62862d4d341a46aad586177317711f9ff04dd75be63d62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6040 Malicious code in setup-ruby (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9639a73d85016c08f0bf612f8e7b6892b542d0008e9f9d80539e0afde4bb71ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in setup-ruby (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9639a73d85016c08f0bf612f8e7b6892b542d0008e9f9d80539e0afde4bb71ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ruby-style-guide (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89cf2431bf1e33c39071abae67176324ffcd08f4b09f2abacaac469dd4c41f4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5861 Malicious code in ruby-style-guide (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89cf2431bf1e33c39071abae67176324ffcd08f4b09f2abacaac469dd4c41f4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

[SECURITY] Fedora 35 Update: rubygem-jmespath-1.6.1-1.fc35

Implements JMESPath for Ruby...

[SECURITY] Fedora 36 Update: rubygem-jmespath-1.6.1-1.fc36

Implements JMESPath for Ruby...

Critical Photon OS Security Update - PHSA-2022-0199

Updates of 'ruby', 'vim' packages of Photon OS have been released...

Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2022-1915)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : ruby (EulerOS-SA-2022-1915)

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before 3.1.2. It occurs in String-to-Float...

Important Photon OS Security Update - PHSA-2022-4.0-0199

Updates of 'vim', 'ruby' packages of Photon OS have been released...

SUSE-SU-2022:2108-1 Security update for rubygem-actionpack-5_1, rubygem-activesupport-5_1

This update for rubygem-actionpack-51 and rubygem-activesupport-51 fixes the following issues: - CVE-2021-22904: Fixed possible DoS Vulnerability in Action Controller Token Authentication bsc1185780 - CVE-2022-23633: Fixed possible exposure of information vulnerability in Action Pack bsc1196182...