Lucene search

AlmaLinuxALSA-2022:0545

HistoryFeb 16, 2022 - 8:27 a.m.

Important: ruby:2.5 security update

2022-02-1608:27:24

errata.almalinux.org

ruby

extensible

interpreted

object-oriented

security update

system management

cve-2020-36327

unix

scripting language

acknowledgments

cvss score

dependencies

text files

references section.

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.01

Percentile

83.6%

JSON

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

rubygem-bundler: Dependencies of gems with explicit source may be installed from a different source (CVE-2020-36327)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
almalinux8noarchrubygem-abrt-doc< 0.3.0-4.module_el8.5.0+2623+08a8ba32rubygem-abrt-doc-0.3.0-4.module_el8.5.0+2623+08a8ba32.noarch.rpm
almalinux8aarch64rubygem-bson< 4.3.0-2.module_el8.5.0+2625+ec418553rubygem-bson-4.3.0-2.module_el8.5.0+2625+ec418553.aarch64.rpm
almalinux8noarchrubygem-pg-doc< 1.0.0-2.module_el8.5.0+2625+ec418553rubygem-pg-doc-1.0.0-2.module_el8.5.0+2625+ec418553.noarch.rpm
almalinux8noarchrubygem-bson-doc< 4.3.0-2.module_el8.5.0+2625+ec418553rubygem-bson-doc-4.3.0-2.module_el8.5.0+2625+ec418553.noarch.rpm
almalinux8noarchrubygem-mysql2-doc< 0.4.10-4.module_el8.5.0+2625+ec418553rubygem-mysql2-doc-0.4.10-4.module_el8.5.0+2625+ec418553.noarch.rpm
almalinux8aarch64rubygem-pg< 1.0.0-2.module_el8.5.0+2625+ec418553rubygem-pg-1.0.0-2.module_el8.5.0+2625+ec418553.aarch64.rpm
almalinux8noarchrubygem-mongo-doc< 2.5.1-2.module_el8.5.0+2625+ec418553rubygem-mongo-doc-2.5.1-2.module_el8.5.0+2625+ec418553.noarch.rpm
almalinux8aarch64rubygem-mysql2< 0.4.10-4.module_el8.5.0+2625+ec418553rubygem-mysql2-0.4.10-4.module_el8.5.0+2625+ec418553.aarch64.rpm
almalinux8noarchrubygem-abrt< 0.3.0-4.module_el8.5.0+2623+08a8ba32rubygem-abrt-0.3.0-4.module_el8.5.0+2623+08a8ba32.noarch.rpm
almalinux8noarchrubygem-bundler< 1.16.1-4.module_el8.5.0+2625+ec418553rubygem-bundler-1.16.1-4.module_el8.5.0+2625+ec418553.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	8	noarch	rubygem-abrt-doc	< 0.3.0-4.module_el8.5.0+2623+08a8ba32	rubygem-abrt-doc-0.3.0-4.module_el8.5.0+2623+08a8ba32.noarch.rpm
almalinux	8	aarch64	rubygem-bson	< 4.3.0-2.module_el8.5.0+2625+ec418553	rubygem-bson-4.3.0-2.module_el8.5.0+2625+ec418553.aarch64.rpm
almalinux	8	noarch	rubygem-pg-doc	< 1.0.0-2.module_el8.5.0+2625+ec418553	rubygem-pg-doc-1.0.0-2.module_el8.5.0+2625+ec418553.noarch.rpm
almalinux	8	noarch	rubygem-bson-doc	< 4.3.0-2.module_el8.5.0+2625+ec418553	rubygem-bson-doc-4.3.0-2.module_el8.5.0+2625+ec418553.noarch.rpm
almalinux	8	noarch	rubygem-mysql2-doc	< 0.4.10-4.module_el8.5.0+2625+ec418553	rubygem-mysql2-doc-0.4.10-4.module_el8.5.0+2625+ec418553.noarch.rpm
almalinux	8	aarch64	rubygem-pg	< 1.0.0-2.module_el8.5.0+2625+ec418553	rubygem-pg-1.0.0-2.module_el8.5.0+2625+ec418553.aarch64.rpm
almalinux	8	noarch	rubygem-mongo-doc	< 2.5.1-2.module_el8.5.0+2625+ec418553	rubygem-mongo-doc-2.5.1-2.module_el8.5.0+2625+ec418553.noarch.rpm
almalinux	8	aarch64	rubygem-mysql2	< 0.4.10-4.module_el8.5.0+2625+ec418553	rubygem-mysql2-0.4.10-4.module_el8.5.0+2625+ec418553.aarch64.rpm
almalinux	8	noarch	rubygem-abrt	< 0.3.0-4.module_el8.5.0+2623+08a8ba32	rubygem-abrt-0.3.0-4.module_el8.5.0+2623+08a8ba32.noarch.rpm
almalinux	8	noarch	rubygem-bundler	< 1.16.1-4.module_el8.5.0+2625+ec418553	rubygem-bundler-1.16.1-4.module_el8.5.0+2625+ec418553.noarch.rpm