Test ID:	1.3.6.1.4.1.25623.1.1.10.2020.0243
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2020-0243)
Summary:	The remote host is missing an update for the 'ruby-RubyGems' package(s) announced via the MGASA-2020-0243 advisory.
Description:	Summary: The remote host is missing an update for the 'ruby-RubyGems' package(s) announced via the MGASA-2020-0243 advisory. Vulnerability Insight: Updated ruby-RubyGems package fixes security vulnerabilities The following vulnerabilities have been reported. CVE-2019-8320: Delete directory using symlink when decompressing tar CVE-2019-8321: Escape sequence injection vulnerability in verbose CVE-2019-8322: Escape sequence injection vulnerability in gem owner CVE-2019-8323: Escape sequence injection vulnerability in API response handling CVE-2019-8324: Installing a malicious gem may lead to arbitrary code execution CVE-2019-8325: Escape sequence injection vulnerability in errors Affected Software/OS: 'ruby-RubyGems' package(s) on Mageia 7. Solution: Please install the updated package(s). CVSS Score: 8.8 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-1000073 Debian Security Information: DSA-4219 (Google Search) https://www.debian.org/security/2018/dsa-4219 Debian Security Information: DSA-4259 (Google Search) https://www.debian.org/security/2018/dsa-4259 http://blog.rubygems.org/2018/02/15/2.7.6-released.html https://github.com/rubygems/rubygems/commit/1b931fc03b819b9a0214be3eaca844ef534175e2 https://lists.debian.org/debian-lts-announce/2018/08/msg00028.html RedHat Security Advisories: RHSA-2018:3729 https://access.redhat.com/errata/RHSA-2018:3729 RedHat Security Advisories: RHSA-2018:3730 https://access.redhat.com/errata/RHSA-2018:3730 RedHat Security Advisories: RHSA-2018:3731 https://access.redhat.com/errata/RHSA-2018:3731 RedHat Security Advisories: RHSA-2019:2028 https://access.redhat.com/errata/RHSA-2019:2028 RedHat Security Advisories: RHSA-2020:0542 https://access.redhat.com/errata/RHSA-2020:0542 RedHat Security Advisories: RHSA-2020:0591 https://access.redhat.com/errata/RHSA-2020:0591 RedHat Security Advisories: RHSA-2020:0663 https://access.redhat.com/errata/RHSA-2020:0663 SuSE Security Announcement: openSUSE-SU-2019:1771 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html https://usn.ubuntu.com/3621-1/ Common Vulnerability Exposure (CVE) ID: CVE-2018-1000074 https://github.com/rubygems/rubygems/commit/254e3d0ee873c008c0b74e8b8abcbdab4caa0a6d https://lists.debian.org/debian-lts-announce/2018/04/msg00017.html https://lists.debian.org/debian-lts-announce/2019/05/msg00028.html https://usn.ubuntu.com/3621-2/ https://usn.ubuntu.com/3685-1/ Common Vulnerability Exposure (CVE) ID: CVE-2018-1000075 https://github.com/rubygems/rubygems/commit/92e98bf8f810bd812f919120d4832df51bc25d83 https://lists.debian.org/debian-lts-announce/2018/04/msg00000.html https://lists.debian.org/debian-lts-announce/2018/04/msg00001.html https://lists.debian.org/debian-lts-announce/2018/04/msg00023.html https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html Common Vulnerability Exposure (CVE) ID: CVE-2018-1000076 https://github.com/rubygems/rubygems/commit/f5042b879259b1f1ce95a0c5082622c646376693 Common Vulnerability Exposure (CVE) ID: CVE-2018-1000077 https://github.com/rubygems/rubygems/commit/feadefc2d351dcb95d6492f5ad17ebca546eb964 Common Vulnerability Exposure (CVE) ID: CVE-2018-1000078 https://github.com/rubygems/rubygems/commit/66a28b9275551384fdab45f3591a82d6b59952cb Common Vulnerability Exposure (CVE) ID: CVE-2018-1000079 https://github.com/rubygems/rubygems/commit/666ef793cad42eed96f7aee1cdf77865db921099 https://github.com/rubygems/rubygems/commit/f83f911e19e27cbac1ccce7471d96642241dd759 Common Vulnerability Exposure (CVE) ID: CVE-2019-8320 https://hackerone.com/reports/317321 https://lists.debian.org/debian-lts-announce/2020/08/msg00027.html RedHat Security Advisories: RHSA-2019:1429 https://access.redhat.com/errata/RHSA-2019:1429 Common Vulnerability Exposure (CVE) ID: CVE-2019-8321 https://hackerone.com/reports/317330 Common Vulnerability Exposure (CVE) ID: CVE-2019-8322 https://hackerone.com/reports/315087 Common Vulnerability Exposure (CVE) ID: CVE-2019-8323 https://hackerone.com/reports/315081 Common Vulnerability Exposure (CVE) ID: CVE-2019-8324 https://hackerone.com/reports/328571 RedHat Security Advisories: RHSA-2019:1972 https://access.redhat.com/errata/RHSA-2019:1972 Common Vulnerability Exposure (CVE) ID: CVE-2019-8325 https://hackerone.com/reports/317353
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.