[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248364

 
 

909

 
 

195388

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

RHSA-2018:0584-01 -- Redhat rh-ruby24-ruby

ID: oval:org.secpod.oval:def:505105Date: (C)2021-01-29   (M)2024-01-29
Class: PATCHFamily: unix




Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. The following packages have been upgraded to a later upstream version: rh-ruby24-ruby . Security Fix: * ruby: Command injection vulnerability in Net::FTP * ruby: Command injection in lib/resolv.rb:lazy_initialize allows arbitrary code execution For more details about the security issue, including the impact, a CVSS score, and other related information, refer to the CVE page listed in the References section.

Platform:
Red Hat Enterprise Linux 7
Red Hat Enterprise Linux 6
Product:
rh-ruby24-ruby
Reference:
RHSA-2018:0584-01
CVE-2017-17405
CVE-2017-17790
CVE    2
CVE-2017-17790
CVE-2017-17405
CPE    3
cpe:/o:redhat:enterprise_linux:7
cpe:/o:redhat:enterprise_linux:6
cpe:/a:redhat:rh-ruby24-ruby

© SecPod Technologies