Test ID:	1.3.6.1.4.1.25623.1.0.843690
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-3621-2)
Summary:	The remote host is missing an update for the 'ruby1.9.1, ruby2.0' package(s) announced via the USN-3621-2 advisory.
Description:	Summary: The remote host is missing an update for the 'ruby1.9.1, ruby2.0' package(s) announced via the USN-3621-2 advisory. Vulnerability Insight: USN-3621-1 fixed vulnerabilities in Ruby. The update caused an issue due to an incomplete patch for CVE-2018-1000074. This update reverts the problematic patch pending further investigation. We apologize for the inconvenience. Original advisory details: It was discovered that Ruby incorrectly handled certain inputs. An attacker could possibly use this to access sensitive information. (CVE-2018-1000073) It was discovered that Ruby incorrectly handled certain files. An attacker could possibly use this to execute arbitrary code. (CVE-2018-1000074) It was discovered that Ruby incorrectly handled certain files. An attacker could possibly use this to cause a denial of service. (CVE-2018-1000075) It was discovered that Ruby incorrectly handled certain crypto signatures. An attacker could possibly use this to execute arbitrary code. (CVE-2018-1000076) It was discovered that Ruby incorrectly handled certain inputs. An attacker could possibly use this to execute arbitrary code. (CVE-2018-1000077, CVE-2018-1000078, CVE-2018-1000079) Affected Software/OS: 'ruby1.9.1, ruby2.0' package(s) on Ubuntu 14.04. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-1000074 Debian Security Information: DSA-4219 (Google Search) https://www.debian.org/security/2018/dsa-4219 Debian Security Information: DSA-4259 (Google Search) https://www.debian.org/security/2018/dsa-4259 http://blog.rubygems.org/2018/02/15/2.7.6-released.html https://github.com/rubygems/rubygems/commit/254e3d0ee873c008c0b74e8b8abcbdab4caa0a6d https://lists.debian.org/debian-lts-announce/2018/04/msg00017.html https://lists.debian.org/debian-lts-announce/2018/08/msg00028.html https://lists.debian.org/debian-lts-announce/2019/05/msg00028.html RedHat Security Advisories: RHSA-2018:3729 https://access.redhat.com/errata/RHSA-2018:3729 RedHat Security Advisories: RHSA-2018:3730 https://access.redhat.com/errata/RHSA-2018:3730 RedHat Security Advisories: RHSA-2018:3731 https://access.redhat.com/errata/RHSA-2018:3731 RedHat Security Advisories: RHSA-2019:2028 https://access.redhat.com/errata/RHSA-2019:2028 RedHat Security Advisories: RHSA-2020:0542 https://access.redhat.com/errata/RHSA-2020:0542 RedHat Security Advisories: RHSA-2020:0591 https://access.redhat.com/errata/RHSA-2020:0591 RedHat Security Advisories: RHSA-2020:0663 https://access.redhat.com/errata/RHSA-2020:0663 SuSE Security Announcement: openSUSE-SU-2019:1771 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html https://usn.ubuntu.com/3621-1/ https://usn.ubuntu.com/3621-2/ https://usn.ubuntu.com/3685-1/
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.