Linux Distros Unpatched Vulnerability : CVE-2018-1000074

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier,...

RHEL 6 / 7 : rh-ruby24-ruby (RHSA-2018:3730)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:3730 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...

org.jruby:jruby (1.7.20.1), org.jruby:jruby-complete (1.7.20.1) +1 more potentially affected by CVE-2018-1000074 via org.jruby:jruby-stdlib (1.7.20.1)

org.jruby:jruby-stdlib MAVEN version 1.7.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.jruby:jruby 1.7.20.1 - org.jruby:jruby-complete 1.7.20.1 - org.jruby:jruby-noasm 1.7.20.1 Source cves:...

com.buschmais.jqassistant.cli:application (1.4.0), com.buschmais.jqassistant.cli:jqassistant-commandline-neo4jv2 (1.4.0) +41 more potentially affected by CVE-2018-1000074 via org.jruby:jruby-stdlib (1.7.27)

org.jruby:jruby-stdlib MAVEN version 1.7.27 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.buschmais.jqassistant.cli:application 1.4.0 - com.buschmais.jqassistant.cli:jqassistant-commandline-neo4jv2...

com.github.stefanliebenberg:blender-css (>=1.0, <=1.1), io.tesla.polyglot:tesla-polyglot-ruby (>=0.1.0, <=0.1.1) +5 more potentially affected by CVE-2018-1000074 via org.jruby:jruby-stdlib (1.7.12)

org.jruby:jruby-stdlib MAVEN version 1.7.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.github.stefanliebenberg:blender-css =1.0, =0.1.0, =2.12.4, =2.1.0, =4.0.0 Source cves: CVE-2018-1000074 Source...

com.tecnoguru:scuby_2.10 (0.2.5), com.tecnoguru:scuby_2.11 (0.2.5) +3 more potentially affected by CVE-2018-1000074 via org.jruby:jruby-stdlib (1.7.13)

org.jruby:jruby-stdlib MAVEN version 1.7.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.tecnoguru:scuby2.10 0.2.5 - com.tecnoguru:scuby2.11 0.2.5 - org.apache.camel:camel-ruby =2.12.5, =2.14.1 -...

org.jruby:jruby (1.7.11), org.jruby:jruby-noasm (1.7.11) +7 more potentially affected by CVE-2018-1000074 via org.jruby:jruby-stdlib (1.7.11)

org.jruby:jruby-stdlib MAVEN version 1.7.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.jruby:jruby 1.7.11 - org.jruby:jruby-noasm 1.7.11 - org.nuiton.js:nuiton-js-wro 1.0.3 -...

com.sysgears.grain:grain (>=0.6.0, <=0.7.0), org.jruby:jruby-core (1.7.3) potentially affected by CVE-2018-1000074 via org.jruby:jruby-stdlib (1.7.3)

org.jruby:jruby-stdlib MAVEN version 1.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.sysgears.grain:grain =0.6.0, =0.7.0 - org.jruby:jruby-core 1.7.3 Source cves: CVE-2018-1000074 Source advisory:...

io.tesla.polyglot:tesla-polyglot-ruby (0.0.9), org.apache.camel:camel-ruby (2.13.0) +2 more potentially affected by CVE-2018-1000074 via org.jruby:jruby-stdlib (1.7.10)

org.jruby:jruby-stdlib MAVEN version 1.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - io.tesla.polyglot:tesla-polyglot-ruby 0.0.9 - org.apache.camel:camel-ruby 2.13.0 - org.jruby:jruby 1.7.10 -...

com.github.lodsve:lodsve-amqp (>=2.5.7, <=2.5.10), com.github.lodsve:lodsve-cache (>=2.5.7, <=2.5.10) +20 more potentially affected by CVE-2018-1000074 via org.jruby:jruby-stdlib (1.7.26)

org.jruby:jruby-stdlib MAVEN version 1.7.26 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.github.lodsve:lodsve-amqp =2.5.7, =2.5.7, =2.5.7, =2.5.7, =2.5.7, =2.5.7, =2.5.7, =2.5.7, =2.5.7, =2.5.7,...

org.jruby:jruby (1.7.16.2), org.jruby:jruby-complete (1.7.16.2) +1 more potentially affected by CVE-2018-1000074 via org.jruby:jruby-stdlib (1.7.16.2)

org.jruby:jruby-stdlib MAVEN version 1.7.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.jruby:jruby 1.7.16.2 - org.jruby:jruby-complete 1.7.16.2 - org.jruby:jruby-noasm 1.7.16.2 Source cves:...

Mageia: Security Advisory (MGASA-2019-0062)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2019:1804-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3685-2: Ruby regression

USN-3685-1 fixed a vulnerability in Ruby. The fix for CVE-2017-0903 introduced a regression in Ruby. This update fixes the problem. Original advisory details: Some of these CVE were already addressed in previous USN: 3439-1, 3553-1, 3528-1. Here we address for the remain releases. It was discover...

Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2020-2395)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2020-1195)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Moderate: Red Hat Security Advisory: ruby security update

An update for ruby is now available for Red Hat Enterprise Linux 7.5 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

RHEL 7 : ruby (RHSA-2020:0542)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0542 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...

Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2019-2230)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2019-2250)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...