{"id":"CVE-2017-17405","aliases":["ALPINE-CVE-2017-17405","BELL-CVE-2017-17405","DLA-1221-1","DLA-1222-1","DLA-1421-1","DSA-4259-1","EUVD-2017-8570","GHSA-q23r-c9rf-97q3","MGASA-2017-0486","RHSA-2018:0378","RHSA-2018:0583","RHSA-2018:0584","RHSA-2018:0585","RHSA-2019:2806","SUSE-SU-2020:1570-1","UBUNTU-CVE-2017-17405","USN-3515-1"],"status":"published","title":"Ruby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile,...","description":"Ruby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile, put, putbinaryfile, and puttextfile use Kernel#open to open a local file. If the localfile argument starts with the \"|\" pipe character, the command following the pipe character is executed. The default value of localfile is File.basename(remotefile), so malicious FTP servers could cause arbitrary command execution.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.73829,"percentile":0.9948,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-78"],"published":"2017-12-15T00:00:00Z","modified":"2026-10-24T10:30:23Z","exploits":[{"source":"exploitdb","id":"EDB-43381","title":"Ruby \u003c 2.2.8 / \u003c 2.3.5 / \u003c 2.4.2 / \u003c 2.5.0-preview1 - 'NET::Ftp' Command Injection","type":"local","platform":"ruby","date":"2017-12-02","url":"https://www.exploit-db.com/exploits/43381"}],"fixes":[{"ecosystem":"Alpine:v3.10","package":"ruby","fixed_in":["2.4.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"ruby","fixed_in":["2.4.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"ruby","fixed_in":["2.4.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"ruby","fixed_in":["2.4.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"ruby","fixed_in":["2.4.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"ruby","fixed_in":["2.4.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"ruby","fixed_in":["2.4.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"ruby","fixed_in":["2.4.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"ruby","fixed_in":["2.4.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"ruby","fixed_in":["2.4.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"ruby","fixed_in":["2.4.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"ruby","fixed_in":["2.4.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"ruby","fixed_in":["2.4.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"ruby","fixed_in":["2.4.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"ruby","fixed_in":["2.4.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.3","package":"ruby","fixed_in":["2.2.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.4","package":"ruby","fixed_in":["2.3.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"ruby","fixed_in":["2.3.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"ruby","fixed_in":["2.4.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"ruby","fixed_in":["2.4.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"ruby","fixed_in":["2.4.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"ruby","fixed_in":["2.4.3-r0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"ruby","fixed_in":["0:2.0.0.648-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"ruby-debuginfo","fixed_in":["0:2.0.0.648-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"ruby-irb","fixed_in":["0:2.0.0.648-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"ruby-libs","fixed_in":["0:2.0.0.648-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"rubygem-bigdecimal","fixed_in":["0:1.2.0-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"rubygem-io-console","fixed_in":["0:0.4.2-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"rubygem-json","fixed_in":["0:1.7.7-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"rubygem-psych","fixed_in":["0:2.0.0-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"rubygem-rdoc","fixed_in":["0:4.0.0-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"rubygems","fixed_in":["0:2.0.14.1-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"ruby","fixed_in":["0:2.0.0.648-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"ruby-debuginfo","fixed_in":["0:2.0.0.648-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"ruby-irb","fixed_in":["0:2.0.0.648-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"ruby-libs","fixed_in":["0:2.0.0.648-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"rubygem-bigdecimal","fixed_in":["0:1.2.0-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"rubygem-io-console","fixed_in":["0:0.4.2-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"rubygem-json","fixed_in":["0:1.7.7-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"rubygem-psych","fixed_in":["0:2.0.0-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"rubygem-rdoc","fixed_in":["0:4.0.0-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"rubygems","fixed_in":["0:2.0.14.1-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.3::server","package":"ruby","fixed_in":["0:2.0.0.648-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.3::server","package":"ruby-debuginfo","fixed_in":["0:2.0.0.648-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.3::server","package":"ruby-irb","fixed_in":["0:2.0.0.648-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.3::server","package":"ruby-libs","fixed_in":["0:2.0.0.648-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.3::server","package":"rubygem-bigdecimal","fixed_in":["0:1.2.0-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.3::server","package":"rubygem-io-console","fixed_in":["0:0.4.2-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.3::server","package":"rubygem-json","fixed_in":["0:1.7.7-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.3::server","package":"rubygem-psych","fixed_in":["0:2.0.0-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.3::server","package":"rubygem-rdoc","fixed_in":["0:4.0.0-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.3::server","package":"rubygems","fixed_in":["0:2.0.14.1-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"ruby-devel","fixed_in":["0:2.0.0.648-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"ruby-doc","fixed_in":["0:2.0.0.648-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"ruby-tcltk","fixed_in":["0:2.0.0.648-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"rubygem-minitest","fixed_in":["0:4.3.2-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"rubygem-rake","fixed_in":["0:0.9.6-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"rubygems-devel","fixed_in":["0:2.0.14.1-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"ruby-devel","fixed_in":["0:2.0.0.648-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"ruby-doc","fixed_in":["0:2.0.0.648-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"ruby-tcltk","fixed_in":["0:2.0.0.648-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"rubygem-minitest","fixed_in":["0:4.3.2-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"rubygem-rake","fixed_in":["0:0.9.6-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"rubygems-devel","fixed_in":["0:2.0.14.1-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.3::server","package":"ruby-devel","fixed_in":["0:2.0.0.648-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.3::server","package":"ruby-doc","fixed_in":["0:2.0.0.648-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.3::server","package":"ruby-tcltk","fixed_in":["0:2.0.0.648-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.3::server","package":"rubygem-minitest","fixed_in":["0:4.3.2-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.3::server","package":"rubygem-rake","fixed_in":["0:0.9.6-30.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.3::server","package":"rubygems-devel","fixed_in":["0:2.0.14.1-30.el7_3"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"ruby1.9.1","fixed_in":["1.9.3.484-2ubuntu1.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"ruby2.0","fixed_in":["2.0.0.484-1ubuntu2.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"ruby2.3","fixed_in":["2.3.1-2~16.04.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2"},{"fixed":"2.4.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2"},{"fixed":"2.4.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2"},{"fixed":"2.4.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2"},{"fixed":"2.4.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2"},{"fixed":"2.4.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2"},{"fixed":"2.4.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2"},{"fixed":"2.4.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2"},{"fixed":"2.4.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2"},{"fixed":"2.4.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2"},{"fixed":"2.4.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2"},{"fixed":"2.4.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2"},{"fixed":"2.4.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2"},{"fixed":"2.4.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2"},{"fixed":"2.4.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2"},{"fixed":"2.4.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.3","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2"},{"fixed":"2.2.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.4","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2"},{"fixed":"2.3.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2"},{"fixed":"2.3.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2"},{"fixed":"2.4.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2"},{"fixed":"2.4.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2"},{"fixed":"2.4.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2"},{"fixed":"2.4.3-r0"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"ruby1.9.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.3.194-8.1+deb7u7"}]}],"versions":["1.9.3.194-8.1","1.9.3.194-8.1+deb7u1","1.9.3.194-8.1+deb7u2","1.9.3.194-8.1+deb7u3","1.9.3.194-8.1+deb7u5","1.9.3.194-8.1+deb7u6"],"bundled":2},{"source":"osv","ecosystem":"Debian:7","package":"ruby1.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.7.358-7.1+deb7u5"}]}],"versions":["1.8.7.358-7","1.8.7.358-7.1","1.8.7.358-7.1+deb7u1","1.8.7.358-7.1+deb7u2","1.8.7.358-7.1+deb7u3","1.8.7.358-7.1+deb7u4"],"bundled":2},{"source":"osv","ecosystem":"Debian:8","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.5-2+deb8u4"}]}],"versions":["2.1.5-2","2.1.5-2+deb8u1","2.1.5-2+deb8u2","2.1.5-2+deb8u3"],"bundled":25},{"source":"osv","ecosystem":"Debian:9","package":"ruby2.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-1+deb9u3"}]}],"versions":["2.3.3-1","2.3.3-1+deb9u1","2.3.3-1+deb9u2"],"bundled":15},{"source":"osv","ecosystem":"Mageia:5","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0.p648-1.6.mga5"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:6","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.8-1.1.mga6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ruby-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.2-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.7-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.0-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14.1-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ruby-tcltk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14.1-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ruby-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.2-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.7-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.0-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14.1-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ruby-tcltk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14.1-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ruby-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.2-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.7-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.0-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14.1-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ruby-tcltk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14.1-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ruby-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.2-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.7-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.0-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14.1-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ruby-tcltk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14.1-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby22-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.9-19.el6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby22-ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.9-19.el6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby22-ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.9-19.el6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby22-ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.9-19.el6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby22-ruby-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.9-19.el6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby22-ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.9-19.el6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby22-ruby-tcltk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.9-19.el6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby22-rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-19.el6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby22-rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.3-19.el6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby22-rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1.1-19.el6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby22-rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.3-19.el6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby22-rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.2-19.el6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby22-rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.8.1-19.el6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby22-rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.4.2-19.el6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby22-rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.0-19.el6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby22-rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.8-19.el6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby22-rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5.4-19.el6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby22-rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5.4-19.el6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby22-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.9-19.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby22-ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.9-19.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby22-ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.9-19.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby22-ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.9-19.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby22-ruby-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.9-19.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby22-ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.9-19.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby22-ruby-tcltk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.9-19.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby22-rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-19.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby22-rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.3-19.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby22-rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1.1-19.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby22-rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.3-19.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby22-rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.2-19.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby22-rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.8.1-19.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby22-rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.4.2-19.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby22-rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.0-19.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby22-rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.8-19.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby22-rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5.4-19.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby22-rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5.4-19.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-90.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-90.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-90.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-90.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-ruby-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-90.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-90.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-90.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-rubygem-did_you_mean","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-90.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.6-90.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.4-90.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.1-90.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-rubygem-net-telnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.1-90.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-rubygem-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.5-90.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.1-90.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.2-90.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.0.0-90.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.0-90.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.3-90.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-rubygem-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.1-90.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.14-90.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.14-90.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-90.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-90.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-90.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-90.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-ruby-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-90.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-90.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-90.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-rubygem-did_you_mean","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-90.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.6-90.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.4-90.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.1-90.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-rubygem-net-telnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.1-90.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-rubygem-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.5-90.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.1-90.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.2-90.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.0.0-90.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.0-90.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.3-90.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-rubygem-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.1-90.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.14-90.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.14-90.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby23-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.6-67.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby23-ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.6-67.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby23-ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.6-67.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby23-ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.6-67.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby23-ruby-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.6-67.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby23-ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.6-67.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby23-ruby-tcltk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.6-67.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby23-rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.8-67.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby23-rubygem-did_you_mean","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-67.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby23-rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.5-67.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby23-rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-67.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby23-rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.8.5-67.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby23-rubygem-net-telnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.1-67.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby23-rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.6-67.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby23-rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0.1-67.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby23-rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.4.2-67.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby23-rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-67.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby23-rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-67.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby23-rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.2.2-67.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby23-rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.2.2-67.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby23-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.6-67.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby23-ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.6-67.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby23-ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.6-67.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby23-ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.6-67.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby23-ruby-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.6-67.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby23-ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.6-67.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby23-ruby-tcltk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.6-67.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby23-rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.8-67.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby23-rubygem-did_you_mean","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-67.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby23-rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.5-67.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby23-rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-67.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby23-rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.8.5-67.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby23-rubygem-net-telnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.1-67.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby23-rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.6-67.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby23-rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0.1-67.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby23-rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.4.2-67.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby23-rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-67.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby23-rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-67.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby23-rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.2.2-67.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby23-rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.2.2-67.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"ruby-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.2-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.7-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.0-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14.1-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"ruby-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.2-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.7-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.0-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14.1-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.3::server","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.3::server","package":"ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.3::server","package":"ruby-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.3::server","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.3::server","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.3::server","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.2-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.3::server","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.7-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.3::server","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.3::server","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.0-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.3::server","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14.1-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"ruby-tcltk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14.1-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"ruby-tcltk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14.1-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.3::server","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.3::server","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.3::server","package":"ruby-tcltk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.3::server","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.3::server","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6-30.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.3::server","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14.1-30.el7_3"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"yast2-ruby-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.53-9.8.1"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"yast2-ruby-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.53-9.8.1"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"yast2-ruby-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.53-9.8.1"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"yast2-ruby-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.53-9.8.1"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"ruby1.9.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.3.484-2ubuntu1.6"}]}],"versions":["1.9.3.194-8.1ubuntu2","1.9.3.448-1ubuntu1","1.9.3.448-1ubuntu2","1.9.3.484-1ubuntu1","1.9.3.484-1ubuntu2","1.9.3.484-2ubuntu1","1.9.3.484-2ubuntu1.1","1.9.3.484-2ubuntu1.2","1.9.3.484-2ubuntu1.3","1.9.3.484-2ubuntu1.5"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"ruby2.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0.484-1ubuntu2.5"}]}],"versions":["2.0.0.299-2","2.0.0.343-1","2.0.0.343-1ubuntu1","2.0.0.353-1","2.0.0.353-1ubuntu1","2.0.0.484-1ubuntu1","2.0.0.484-1ubuntu2","2.0.0.484-1ubuntu2.1","2.0.0.484-1ubuntu2.2","2.0.0.484-1ubuntu2.4"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"ruby2.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-2~16.04.4"}]}],"versions":["2.3.0-1","2.3.0-2","2.3.0-4ubuntu2","2.3.0-4ubuntu3","2.3.0-5ubuntu1","2.3.1-2~16.04","2.3.1-2~16.04.2"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"ruby1.9.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.3.484-2ubuntu1.6"}]}],"versions":["1.9.3.194-8.1ubuntu2","1.9.3.448-1ubuntu1","1.9.3.448-1ubuntu2","1.9.3.484-1ubuntu1","1.9.3.484-1ubuntu2","1.9.3.484-2ubuntu1","1.9.3.484-2ubuntu1.1","1.9.3.484-2ubuntu1.2","1.9.3.484-2ubuntu1.3","1.9.3.484-2ubuntu1.5"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"ruby2.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0.484-1ubuntu2.5"}]}],"versions":["2.0.0.299-2","2.0.0.343-1","2.0.0.343-1ubuntu1","2.0.0.353-1","2.0.0.353-1ubuntu1","2.0.0.484-1ubuntu1","2.0.0.484-1ubuntu2","2.0.0.484-1ubuntu2.1","2.0.0.484-1ubuntu2.2","2.0.0.484-1ubuntu2.4"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"ruby2.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-2~16.04.4"}]}],"versions":["2.3.0-1","2.3.0-2","2.3.0-4ubuntu2","2.3.0-4ubuntu3","2.3.0-5ubuntu1","2.3.1-2~16.04","2.3.1-2~16.04.2"]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_server_aus"},{"vendor":"redhat","product":"enterprise_linux_server_eus"},{"vendor":"redhat","product":"enterprise_linux_server_tus"},{"vendor":"redhat","product":"enterprise_linux_workstation"},{"vendor":"ruby-lang","product":"ruby"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2018:0585","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2017/12/msg00024.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0378","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/102204","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.securitytracker.com/id/1042004","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://www.ruby-lang.org/en/news/2017/12/14/net-ftp-command-injection-cve-2017-17405/","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","web","article","report"]},{"url":"https://www.exploit-db.com/exploits/43381/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit","Third Party Advisory","VDB Entry","evidence"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0584","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.ruby-lang.org/en/news/2017/12/14/ruby-2-4-3-released/","tags":["x_refsource_CONFIRM","x_transferred","Patch","Release Notes","Vendor Advisory","fix","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0583","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2017/12/msg00025.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4259","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2806","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-17405","tags":["advisory"]},{"url":"https://www.exploit-db.com/exploits/43381"},{"url":"https://www.ruby-lang.org/en/news/2017/12/14/net-ftp-command-injection-cve-2017-17405"},{"url":"https://www.ruby-lang.org/en/news/2017/12/14/ruby-2-4-3-released"},{"url":"https://github.com/advisories/GHSA-q23r-c9rf-97q3"},{"url":"https://security.alpinelinux.org/vuln/CVE-2017-17405","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2017-17405","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2017-0486.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22203","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1487552","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1487587","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1487588","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1487589","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1487590","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1491866","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1492012","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1492015","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1500488","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1526189","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1528218","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0378.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-0898","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-0898","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-0898","tags":["advisory"]},{"url":"https://www.ruby-lang.org/en/news/2017/09/14/sprintf-buffer-underrun-cve-2017-0898/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-0899","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-0899","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-0899","tags":["advisory"]},{"url":"http://blog.rubygems.org/2017/08/27/2.6.13-released.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-0900","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-0900","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-0900","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-0901","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-0901","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-0901","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-0902","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-0902","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-0902","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-0903","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-0903","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-0903","tags":["advisory"]},{"url":"http://blog.rubygems.org/2017/10/09/2.6.14-released.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10784","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10784","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10784","tags":["advisory"]},{"url":"https://www.ruby-lang.org/en/news/2017/09/14/webrick-basic-auth-escape-sequence-injection-cve-2017-10784/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-14033","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-14033","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-14033","tags":["advisory"]},{"url":"https://www.ruby-lang.org/en/news/2017/09/14/openssl-asn1-buffer-underrun-cve-2017-14033/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-14064","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-14064","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-14064","tags":["advisory"]},{"url":"https://www.ruby-lang.org/en/news/2017/09/14/json-heap-exposure-cve-2017-14064/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-17405","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-17405","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-17790","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-17790","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-17790","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1248935","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1549646","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0583.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-5147","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-5147","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-5147","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7551","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7551","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7551","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1549651","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0584.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1549649","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0585.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2806.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201570-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1043983","tags":["report"]},{"url":"https://bugzilla.suse.com/1048072","tags":["report"]},{"url":"https://bugzilla.suse.com/1055265","tags":["report"]},{"url":"https://bugzilla.suse.com/1056286","tags":["report"]},{"url":"https://bugzilla.suse.com/1056782","tags":["report"]},{"url":"https://bugzilla.suse.com/1058754","tags":["report"]},{"url":"https://bugzilla.suse.com/1058755","tags":["report"]},{"url":"https://bugzilla.suse.com/1058757","tags":["report"]},{"url":"https://bugzilla.suse.com/1062452","tags":["report"]},{"url":"https://bugzilla.suse.com/1069607","tags":["report"]},{"url":"https://bugzilla.suse.com/1069632","tags":["report"]},{"url":"https://bugzilla.suse.com/1073002","tags":["report"]},{"url":"https://bugzilla.suse.com/1078782","tags":["report"]},{"url":"https://bugzilla.suse.com/1082007","tags":["report"]},{"url":"https://bugzilla.suse.com/1082008","tags":["report"]},{"url":"https://bugzilla.suse.com/1082009","tags":["report"]},{"url":"https://bugzilla.suse.com/1082010","tags":["report"]},{"url":"https://bugzilla.suse.com/1082011","tags":["report"]},{"url":"https://bugzilla.suse.com/1082014","tags":["report"]},{"url":"https://bugzilla.suse.com/1082058","tags":["report"]},{"url":"https://bugzilla.suse.com/1087433","tags":["report"]},{"url":"https://bugzilla.suse.com/1087434","tags":["report"]},{"url":"https://bugzilla.suse.com/1087436","tags":["report"]},{"url":"https://bugzilla.suse.com/1087437","tags":["report"]},{"url":"https://bugzilla.suse.com/1087440","tags":["report"]},{"url":"https://bugzilla.suse.com/1087441","tags":["report"]},{"url":"https://bugzilla.suse.com/1112530","tags":["report"]},{"url":"https://bugzilla.suse.com/1112532","tags":["report"]},{"url":"https://bugzilla.suse.com/1130611","tags":["report"]},{"url":"https://bugzilla.suse.com/1130617","tags":["report"]},{"url":"https://bugzilla.suse.com/1130620","tags":["report"]},{"url":"https://bugzilla.suse.com/1130622","tags":["report"]},{"url":"https://bugzilla.suse.com/1130623","tags":["report"]},{"url":"https://bugzilla.suse.com/1130627","tags":["report"]},{"url":"https://bugzilla.suse.com/1152990","tags":["report"]},{"url":"https://bugzilla.suse.com/1152992","tags":["report"]},{"url":"https://bugzilla.suse.com/1152994","tags":["report"]},{"url":"https://bugzilla.suse.com/1152995","tags":["report"]},{"url":"https://bugzilla.suse.com/1171517","tags":["report"]},{"url":"https://bugzilla.suse.com/1172275","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-9096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-0898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-0899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-0900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-0901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-0902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-0903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14033","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9228","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-6914","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16201","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16255","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10663","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-17405","tags":["report"]},{"url":"https://github.com/ruby/ruby/commit/6d3f72e5be2312be312f2acbf3465b05293c1431","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3515-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2017-17405","description":"Ruby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile, put, putbinaryfile, and puttextfile use Kernel#open to open a local file. If the localfile argument starts with the \"|\" pipe character, the command following the pipe character is executed. The default value of localfile is File.basename(remotefile), so malicious FTP servers could cause arbitrary command execution.","status":"published","published":"2017-12-15T09:00:00Z","modified":"2024-08-05T20:51:31.364Z","updated_at":"2026-11-02T14:33:18.556155Z"}],"euvd":[{"id":"EUVD-2017-8570","description":"Ruby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile, put, putbinaryfile, and puttextfile use Kernel#open to open a local file. If the localfile argument starts with the \"|\" pipe character, the command following the pipe character is executed. The default value of localfile is File.basename(remotefile), so malicious FTP servers could cause arbitrary command execution.","status":"published","published":"2017-12-15T09:00:00Z","modified":"2024-08-05T20:51:31Z","updated_at":"2026-11-03T02:23:10.087185Z"}],"ghsa":[{"id":"GHSA-q23r-c9rf-97q3","title":"Ruby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile,...","description":"Ruby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile, put, putbinaryfile, and puttextfile use Kernel#open to open a local file. If the localfile argument starts with the \"|\" pipe character, the command following the pipe character is executed. The default value of localfile is File.basename(remotefile), so malicious FTP servers could cause arbitrary command execution.","status":"published","published":"2022-05-13T01:54:10Z","modified":"2025-04-20T03:51:08Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T15:01:57.295459Z"}],"nvd":[{"id":"CVE-2017-17405","description":"Ruby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile, put, putbinaryfile, and puttextfile use Kernel#open to open a local file. If the localfile argument starts with the \"|\" pipe character, the command following the pipe character is executed. The default value of localfile is File.basename(remotefile), so malicious FTP servers could cause arbitrary command execution.","status":"published","published":"2017-12-15T09:29:00.203Z","modified":"2026-06-17T01:10:44.647Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:04:10.156892Z"}],"osv":[{"id":"ALPINE-CVE-2017-17405","description":"Ruby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile, put, putbinaryfile, and puttextfile use Kernel#open to open a local file. If the localfile argument starts with the \"|\" pipe character, the command following the pipe character is executed. The default value of localfile is File.basename(remotefile), so malicious FTP servers could cause arbitrary command execution.","status":"published","published":"2017-12-15T09:29:00.203Z","modified":"2026-07-08T04:31:12.31393206Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:46.716249Z"},{"id":"BELL-CVE-2017-17405","title":"CVE-2017-17405 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:09.273813Z","modified":"2026-01-26T09:49:12.619924Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:14.137943Z"},{"id":"CVE-2017-17405","description":"Ruby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile, put, putbinaryfile, and puttextfile use Kernel#open to open a local file. If the localfile argument starts with the \"|\" pipe character, the command following the pipe character is executed. The default value of localfile is File.basename(remotefile), so malicious FTP servers could cause arbitrary command execution.","status":"published","published":"2017-12-15T09:29:00.203Z","modified":"2026-10-24T10:30:23.93258213Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:04.853379Z"},{"id":"RHSA-2018:0378","title":"Red Hat Security Advisory: ruby security update","status":"published","published":"2024-09-13T14:43:33Z","modified":"2026-06-29T10:19:18Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:0583","title":"Red Hat Security Advisory: rh-ruby22-ruby security, bug fix, and enhancement update","status":"published","published":"2024-09-13T14:43:49Z","modified":"2026-06-29T10:19:32Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:0584","title":"Red Hat Security Advisory: rh-ruby24-ruby security, bug fix, and enhancement update","status":"published","published":"2024-09-13T13:40:57Z","modified":"2026-06-29T10:19:32Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:0585","title":"Red Hat Security Advisory: rh-ruby23-ruby security, bug fix, and enhancement update","status":"published","published":"2024-09-13T14:43:40Z","modified":"2026-06-29T10:19:33Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2019:2806","title":"Red Hat Security Advisory: ruby security update","status":"published","published":"2024-09-13T13:42:42Z","modified":"2026-06-29T10:26:35Z","cvss":[{"version":"3.0","score":6.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"UBUNTU-CVE-2017-17405","description":"Ruby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile, put, putbinaryfile, and puttextfile use Kernel#open to open a local file. If the localfile argument starts with the \"|\" pipe character, the command following the pipe character is executed. The default value of localfile is File.basename(remotefile), so malicious FTP servers could cause arbitrary command execution.","status":"published","published":"2017-12-15T00:00:00Z","modified":"2026-04-22T11:19:54.94503Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:14.563448Z"},{"id":"DLA-1221-1","title":"ruby1.9.1 - security update","status":"published","published":"2017-12-24T00:00:00Z","modified":"2026-03-09T01:01:09.232757Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DLA-1222-1","title":"ruby1.8 - security update","status":"published","published":"2017-12-24T00:00:00Z","modified":"2026-03-09T01:01:53.654218Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DLA-1421-1","title":"ruby2.1 - security update","status":"published","published":"2018-07-13T00:00:00Z","modified":"2026-03-09T01:00:51.935861Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DSA-4259-1","title":"ruby2.3 - security update","status":"published","published":"2018-07-31T00:00:00Z","modified":"2026-03-09T02:08:41.34267Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"MGASA-2017-0486","title":"Updated ruby packages fix security vulnerabilities","description":"Ruby before 2.4.3 allows Net::FTP command injection. Net::FTP#get,\ngetbinaryfile, gettextfile, put, putbinaryfile, and puttextfile use\nKernel#open to open a local file. If the localfile argument starts with\nthe \"|\" pipe character, the command following the pipe character is\nexecuted. The default value of localfile is File.basename(remotefile),\nso malicious FTP servers could cause arbitrary command execution\n(CVE-2017-17405).\n\nThe lazy_initialize function in lib/resolv.rb in Ruby through 2.4.3 uses\nKernel#open, which might allow Command Injection attacks, as\ndemonstrated by a Resolv::Hosts::new argument beginning with a '|'\ncharacter (CVE-2017-17790).\n","status":"published","published":"2017-12-31T15:51:06Z","modified":"2026-04-16T06:24:02.677244831Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"SUSE-SU-2020:1570-1","title":"Security update for ruby2.1","description":"This update for ruby2.1 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2015-9096: Fixed an SMTP command injection via CRLFsequences in a RCPT TO or MAIL FROM command (bsc#1043983).\n- CVE-2016-7798: Fixed an IV Reuse in GCM Mode (bsc#1055265).\n- CVE-2017-0898: Fixed a buffer underrun vulnerability in Kernel.sprintf (bsc#1058755).\n- CVE-2017-0899: Fixed an issue with malicious gem specifications, insufficient sanitation when printing gem specifications could have included terminal characters (bsc#1056286).\n- CVE-2017-0900: Fixed an issue with malicious gem specifications, the query command could have led to a denial of service attack against clients (bsc#1056286).\n- CVE-2017-0901: Fixed an issue with malicious gem specifications, potentially overwriting arbitrary files on the client system (bsc#1056286).\n- CVE-2017-0902: Fixed an issue with malicious gem specifications, that could have enabled MITM attacks against clients (bsc#1056286).\n- CVE-2017-0903: Fixed an unsafe object deserialization vulnerability (bsc#1062452).\n- CVE-2017-9228: Fixed a heap out-of-bounds write in bitset_set_range() during regex compilation (bsc#1069607).\n- CVE-2017-9229: Fixed an invalid pointer dereference in left_adjust_char_head() in oniguruma (bsc#1069632).\n- CVE-2017-10784: Fixed an escape sequence injection vulnerability in the Basic authentication of WEBrick (bsc#1058754).\n- CVE-2017-14033: Fixed a buffer underrun vulnerability in OpenSSL ASN1 decode (bsc#1058757).\n- CVE-2017-14064: Fixed an arbitrary memory exposure during a JSON.generate call (bsc#1056782).\n- CVE-2017-17405: Fixed a command injection vulnerability in Net::FTP (bsc#1073002).\n- CVE-2017-17742: Fixed an HTTP response splitting issue in WEBrick (bsc#1087434).\n- CVE-2017-17790: Fixed a command injection in lib/resolv.rb:lazy_initialize() (bsc#1078782).\n- CVE-2018-6914: Fixed an unintentional file and directory creation with directory traversal in tempfile and tmpdir (bsc#1087441).\n- CVE-2018-8777: Fixed a potential DoS caused by large requests in WEBrick (bsc#1087436).\n- CVE-2018-8778: Fixed a buffer under-read in String#unpack (bsc#1087433).\n- CVE-2018-8779: Fixed an unintentional socket creation by poisoned NUL byte in UNIXServer and UNIXSocket (bsc#1087440).\n- CVE-2018-8780: Fixed an unintentional directory traversal by poisoned NUL byte in Dir (bsc#1087437).\n- CVE-2018-16395: Fixed an issue with OpenSSL::X509::Name equality checking (bsc#1112530).\n- CVE-2018-16396: Fixed an issue with tainted string handling, where the flag was not propagated in Array#pack and String#unpack with some directives (bsc#1112532).\n- CVE-2018-1000073: Fixed a path traversal issue (bsc#1082007).\n- CVE-2018-1000074: Fixed an unsafe object deserialization vulnerability in gem owner, allowing arbitrary code execution with specially crafted YAML (bsc#1082008).\n- CVE-2018-1000075: Fixed an infinite loop vulnerability due to negative size in tar header causes Denial of Service (bsc#1082014).\n- CVE-2018-1000076: Fixed an improper verification of signatures in tarballs (bsc#1082009).\n- CVE-2018-1000077: Fixed an improper URL validation in the homepage attribute of ruby gems (bsc#1082010).\n- CVE-2018-1000078: Fixed a XSS vulnerability in the homepage attribute when displayed via gem server (bsc#1082011).\n- CVE-2018-1000079: Fixed a path traversal issue during gem installation allows to write to arbitrary filesystem locations (bsc#1082058).\n- CVE-2019-8320: Fixed a directory traversal issue when decompressing tar files (bsc#1130627).\n- CVE-2019-8321: Fixed an escape sequence injection vulnerability in verbose (bsc#1130623).\n- CVE-2019-8322: Fixed an escape sequence injection vulnerability in gem owner (bsc#1130622).\n- CVE-2019-8323: Fixed an escape sequence injection vulnerability in API response handling (bsc#1130620).\n- CVE-2019-8324: Fixed an issue with malicious gems that may have led to arbitrary code execution (bsc#1130617).\n- CVE-2019-8325: Fixed an escape sequence injection vulnerability in errors (bsc#1130611).\n- CVE-2019-15845: Fixed a NUL injection vulnerability in File.fnmatch and File.fnmatch? (bsc#1152994).\n- CVE-2019-16201: Fixed a regular expression denial of service vulnerability in WEBrick's digest access authentication (bsc#1152995).\n- CVE-2019-16254: Fixed an HTTP response splitting vulnerability in WEBrick (bsc#1152992).\n- CVE-2019-16255: Fixed a code injection vulnerability in Shell#[] and Shell#test (bsc#1152990).\n- CVE-2020-10663: Fixed an unsafe object creation vulnerability in JSON (bsc#1171517).\n\nNon-security issue fixed:\n\n- Add conflicts to libruby to make sure ruby and ruby-stdlib are also updated when libruby is updated (bsc#1048072).\n\nAlso yast2-ruby-bindings on SLES 12 SP2 LTSS was updated to handle the updated ruby interpreter. (bsc#1172275)\n","status":"published","published":"2020-06-09T09:16:12Z","modified":"2026-02-04T03:07:34.074987Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"USN-3515-1","title":"ruby1.9.1, ruby2.0, ruby2.3 vulnerability","description":"It was discovered that Ruby allows FTP command injection.\nAn attacker could use this to cause arbitrary command execution.\n","status":"published","published":"2018-01-04T15:49:50Z","modified":"2026-04-22T09:41:01.623927Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}