Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.820358
Category:Fedora Local Security Checks
Title:Fedora: Security Advisory for rubygem-nokogiri (FEDORA-2022-132c6d7c2e)
Summary:The remote host is missing an update for the 'rubygem-nokogiri'; package(s) announced via the FEDORA-2022-132c6d7c2e advisory.
Description:Summary:
The remote host is missing an update for the 'rubygem-nokogiri'
package(s) announced via the FEDORA-2022-132c6d7c2e advisory.

Vulnerability Insight:
Nokogiri parses and searches XML/HTML very quickly, and also has
correctly implemented CSS3 selector support as well as XPath support.

Nokogiri also features an Hpricot compatibility layer to help ease the change
to using correct CSS and XPath.

Affected Software/OS:
'rubygem-nokogiri' package(s) on Fedora 34.

Solution:
Please install the updated package(s).

CVSS Score:
5.0

CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2022-24836
https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-crjr-9rc5-ghw8
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XMDCWRQXJQ3TFSETPCEFMQ6RR6ME5UA3/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OUPLBUZVM4WPFSXBEP2JS3R6LMKRTLFC/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6DHCOWMA5PQTIQIMDENA7R2Y5BDYAIYM/
http://seclists.org/fulldisclosure/2022/Dec/23
https://security.gentoo.org/glsa/202208-29
https://github.com/sparklemotion/nokogiri/commit/e444525ef1634b675cd1cf52d39f4320ef0aecfd
https://lists.debian.org/debian-lts-announce/2022/05/msg00013.html
https://lists.debian.org/debian-lts-announce/2022/10/msg00018.html
CopyrightCopyright (C) 2022 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.