CVE-2021-81810
Security update for ruby
No score
This update for ruby fixes the following issues:
- CVE-2018-16395: Fixed an issue where two x509 certificates could be considered to be equal when this was not the case (bsc#1112530).
- CVE-2021-32066: Fixed an issue where the IMAP client API would not report a failure when StartTLS failed, leading to potential man in the middle attacks (bsc#1188160).
- CVE-2021-31810: Fixed an issue where the FTP client API would trust certain responses from a malicious server, tricking the client into connecting to addresses not (bsc#1188161).
What each source reports
OSVSUSE-SU-2022:15034-1 No score
Security update for ruby
This update for ruby fixes the following issues:
- CVE-2018-16395: Fixed an issue where two x509 certificates could be considered to be equal when this was not the case (bsc#1112530).
- CVE-2021-32066: Fixed an issue where the IMAP client API would not report a failure when StartTLS failed, leading to potential man in the middle attacks (bsc#1188160).
- CVE-2021-31810: Fixed an issue where the FTP client API would trust certain responses from a malicious server, tricking the client into connecting to addresses not (bsc#1188161).
- Record
SUSE-SU-2022:15034-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
rubySUSE:WebYast 1.3 From an advisory covering 4 CVEs |
before 1.8.7.p357-0.9.20.3.1 | 1.8.7.p357-0.9.20.3.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-81810 is a vulnerability with no CVSS score yet in ruby, published September 6, 2022. No source lists public exploit code. No source names a fixed version.