jruby

Link	package \| bugs open \| bugs closed \| Wiki \| GitHub \| web search
Description	100% pure-Java implementation of the Ruby programming language
Version	9.4.6.0-1 [extra]

Resolved

Group	Affected	Fixed	Severity	Status	Ticket
AVG-1906	9.2.19.0-1	9.3.0.0-1	High	Fixed

Issue	Group	Severity	Remote	Type	Description
CVE-2021-32066	AVG-1906	High	Yes	Silent downgrade	A security issue has been discovered in Ruby before versions 3.0.2, 2.7.4 and 2.6.8. Net::IMAP does not raise an exception when StartTLS fails with an...
CVE-2021-31810	AVG-1906	Medium	Yes	Information disclosure	A security issue has been discovered in Ruby before versions 3.0.2, 2.7.4 and 2.6.8. A malicious FTP server can use the PASV response to trick Net::FTP into...
CVE-2021-31799	AVG-1906	Medium	Yes	Arbitrary command execution	RDoc before version 6.3.1, as bundled with Ruby before version 2.7.4 and 2.6.8 as well as GitLab before version 14.0.2, used to call Kernel#open to open a...

Issue

Group

Severity

Remote

Type

Description

CVE-2021-32066

AVG-1906

High

Yes

Silent downgrade

A security issue has been discovered in Ruby before versions 3.0.2, 2.7.4 and 2.6.8. Net::IMAP does not raise an exception when StartTLS fails with an...

CVE-2021-31810

AVG-1906

Medium

Yes

Information disclosure

A security issue has been discovered in Ruby before versions 3.0.2, 2.7.4 and 2.6.8. A malicious FTP server can use the PASV response to trick Net::FTP into...

CVE-2021-31799

AVG-1906

Medium

Yes

Arbitrary command execution

RDoc before version 6.3.1, as bundled with Ruby before version 2.7.4 and 2.6.8 as well as GitLab before version 14.0.2, used to call Kernel#open to open a...