OPENSUSE-SU-2021:3838-1
Not scored
Security update for ruby2.5
This update for ruby2.5 fixes the following issues: - CVE-2021-31799: Fixed Command injection vulnerability in RDoc (bsc#1190375). - CVE-2021-31810: Fixed trusting FTP PASV responses vulnerability in Net:FTP (bsc#1188161). - CVE-2021-32066: Fixed StartTLS stripping vulnerability in Net:IMAP (bsc#1188160).
Exploit probability
Not scored
Published
December 1, 2021
Required by
Not available
Last source change
February 4, 2026
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
openSUSE-SU-2021:3838-1
View original source
This update for ruby2.5 fixes the following issues: - CVE-2021-31799: Fixed Command injection vulnerability in RDoc (bsc#1190375). - CVE-2021-31810: Fixed trusting FTP PASV responses vulnerability in Net:FTP (bsc#1188161). - CVE-2021-32066: Fixed StartTLS stripping vulnerability in Net:IMAP (bsc#1188160).
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1188160
- https://bugzilla.suse.com/1188161
- https://bugzilla.suse.com/1190375
- https://lists.opensuse.org/archives/list/[email protected]/thread/3CHM25JITRX6N3UKVDBKNLWS6MYWFY3M/
- https://www.suse.com/security/cve/CVE-2021-31799
- https://www.suse.com/security/cve/CVE-2021-31810
- https://www.suse.com/security/cve/CVE-2021-32066