gpp_maybe Security update for ruby2.1

SUSE-SLE-SAP-12-SP4-2021-3837

This update for ruby2.1 fixes the following issues: - CVE-2020-25613: Fixed potential HTTP request smuggling in WEBrick (bsc#1177125). - CVE-2021-31799: Fixed Command injection vulnerability in RDoc (bsc#1190375). - CVE-2021-31810: Fixed trusting FTP PASV responses vulnerability in Net:FTP (bsc#1188161). - CVE-2021-32066: Fixed StartTLS stripping vulnerability in Net:IMAP (bsc#1188160).

• Release Date
  Dec 1 2021
• References
  Bugzilla: 1177125, 1188160, 1188161, 1190375
  CVEs: CVE-2020-25613, CVE-2021-31799, CVE-2021-31810, CVE-2021-32066
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12.4 ppc64le

• Packages
  libruby2_1-2_1
  Dynamic runtime library for Ruby

  2.1.9-19.6.1

  lock rpm

  ruby2.1
  An Interpreted Object-Oriented Scripting Language

  2.1.9-19.6.1

  lock rpm

  lock src

  ruby2.1-stdlib
  The Ruby standard library

  2.1.9-19.6.1

  lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.4 x86_64

• Packages
  libruby2_1-2_1
  Dynamic runtime library for Ruby

  2.1.9-19.6.1

  lock rpm

  ruby2.1
  An Interpreted Object-Oriented Scripting Language

  2.1.9-19.6.1

  lock rpm

  lock src

  ruby2.1-stdlib
  The Ruby standard library

  2.1.9-19.6.1

  lock rpm