Moderate: ruby:2.7 security, bug fix, and enhancement update

2023-06-2700:00:00

errata.almalinux.org

ruby scripting language

text processing

system management

cgi vulnerability

uri vulnerability

time vulnerability

cvss score

cve page

upgrade

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.005

Percentile

77.3%

JSON

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

The following packages have been upgraded to a later upstream version: ruby (2.7). (BZ#2189465)

Security Fix(es):

ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)
ruby: ReDoS vulnerability in URI (CVE-2023-28755)
ruby: ReDoS vulnerability in Time (CVE-2023-28756)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
almalinux8noarchrubygem-test-unit< 3.3.4-139.module_el8.8.0+3578+2b4b06darubygem-test-unit-3.3.4-139.module_el8.8.0+3578+2b4b06da.noarch.rpm
almalinux8i686ruby-devel< 2.7.8-139.module_el8.8.0+3578+2b4b06daruby-devel-2.7.8-139.module_el8.8.0+3578+2b4b06da.i686.rpm
almalinux8noarchrubygem-bundler< 2.2.24-139.module_el8.8.0+3578+2b4b06darubygem-bundler-2.2.24-139.module_el8.8.0+3578+2b4b06da.noarch.rpm
almalinux8noarchrubygem-rdoc< 6.2.1.1-139.module_el8.8.0+3578+2b4b06darubygem-rdoc-6.2.1.1-139.module_el8.8.0+3578+2b4b06da.noarch.rpm
almalinux8noarchrubygem-power_assert< 1.1.7-139.module_el8.8.0+3578+2b4b06darubygem-power_assert-1.1.7-139.module_el8.8.0+3578+2b4b06da.noarch.rpm
almalinux8i686ruby< 2.7.8-139.module_el8.8.0+3578+2b4b06daruby-2.7.8-139.module_el8.8.0+3578+2b4b06da.i686.rpm
almalinux8noarchrubygem-mongo< 2.11.3-1.module_el8.3.0+6147+d0dfc1e4rubygem-mongo-2.11.3-1.module_el8.3.0+6147+d0dfc1e4.noarch.rpm
almalinux8noarchrubygem-mongo-doc< 2.11.3-1.module_el8.3.0+6147+d0dfc1e4rubygem-mongo-doc-2.11.3-1.module_el8.3.0+6147+d0dfc1e4.noarch.rpm
almalinux8noarchrubygem-net-telnet< 0.2.0-139.module_el8.8.0+3578+2b4b06darubygem-net-telnet-0.2.0-139.module_el8.8.0+3578+2b4b06da.noarch.rpm
almalinux8i686rubygem-json< 2.3.0-139.module_el8.8.0+3578+2b4b06darubygem-json-2.3.0-139.module_el8.8.0+3578+2b4b06da.i686.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	8	noarch	rubygem-test-unit	< 3.3.4-139.module_el8.8.0+3578+2b4b06da	rubygem-test-unit-3.3.4-139.module_el8.8.0+3578+2b4b06da.noarch.rpm
almalinux	8	i686	ruby-devel	< 2.7.8-139.module_el8.8.0+3578+2b4b06da	ruby-devel-2.7.8-139.module_el8.8.0+3578+2b4b06da.i686.rpm
almalinux	8	noarch	rubygem-bundler	< 2.2.24-139.module_el8.8.0+3578+2b4b06da	rubygem-bundler-2.2.24-139.module_el8.8.0+3578+2b4b06da.noarch.rpm
almalinux	8	noarch	rubygem-rdoc	< 6.2.1.1-139.module_el8.8.0+3578+2b4b06da	rubygem-rdoc-6.2.1.1-139.module_el8.8.0+3578+2b4b06da.noarch.rpm
almalinux	8	noarch	rubygem-power_assert	< 1.1.7-139.module_el8.8.0+3578+2b4b06da	rubygem-power_assert-1.1.7-139.module_el8.8.0+3578+2b4b06da.noarch.rpm
almalinux	8	i686	ruby	< 2.7.8-139.module_el8.8.0+3578+2b4b06da	ruby-2.7.8-139.module_el8.8.0+3578+2b4b06da.i686.rpm
almalinux	8	noarch	rubygem-mongo	< 2.11.3-1.module_el8.3.0+6147+d0dfc1e4	rubygem-mongo-2.11.3-1.module_el8.3.0+6147+d0dfc1e4.noarch.rpm
almalinux	8	noarch	rubygem-mongo-doc	< 2.11.3-1.module_el8.3.0+6147+d0dfc1e4	rubygem-mongo-doc-2.11.3-1.module_el8.3.0+6147+d0dfc1e4.noarch.rpm
almalinux	8	noarch	rubygem-net-telnet	< 0.2.0-139.module_el8.8.0+3578+2b4b06da	rubygem-net-telnet-0.2.0-139.module_el8.8.0+3578+2b4b06da.noarch.rpm
almalinux	8	i686	rubygem-json	< 2.3.0-139.module_el8.8.0+3578+2b4b06da	rubygem-json-2.3.0-139.module_el8.8.0+3578+2b4b06da.i686.rpm