(RHSA-2022:0548) Important: ruby:2.5 security update

2022-02-1608:26:47

access.redhat.com

0.01 Low

EPSS

Percentile

83.4%

JSON

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

rubygem-bundler: Dependencies of gems with explicit source may be installed from a different source (CVE-2020-36327)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanynoarchrubygems-devel< 2.7.6.2-105.module+el8.1.0+3656+f80bfa1drubygems-devel-2.7.6.2-105.module+el8.1.0+3656+f80bfa1d.noarch.rpm
RedHatanyx86_64ruby-libs-debuginfo< 2.5.5-105.module+el8.1.0+3656+f80bfa1druby-libs-debuginfo-2.5.5-105.module+el8.1.0+3656+f80bfa1d.x86_64.rpm
RedHatanyi686rubygem-json< 2.1.0-105.module+el8.1.0+3656+f80bfa1drubygem-json-2.1.0-105.module+el8.1.0+3656+f80bfa1d.i686.rpm
RedHatanyppc64lerubygem-psych< 3.0.2-105.module+el8.1.0+3656+f80bfa1drubygem-psych-3.0.2-105.module+el8.1.0+3656+f80bfa1d.ppc64le.rpm
RedHatanynoarchrubygem-minitest< 5.10.3-105.module+el8.1.0+3656+f80bfa1drubygem-minitest-5.10.3-105.module+el8.1.0+3656+f80bfa1d.noarch.rpm
RedHatanynoarchrubygem-bundler-doc< 1.16.1-4.module+el8.1.0+14085+cd0ba992rubygem-bundler-doc-1.16.1-4.module+el8.1.0+14085+cd0ba992.noarch.rpm
RedHatanyi686rubygem-openssl< 2.1.2-105.module+el8.1.0+3656+f80bfa1drubygem-openssl-2.1.2-105.module+el8.1.0+3656+f80bfa1d.i686.rpm
RedHatanynoarchrubygem-abrt-doc< 0.3.0-4.module+el8.1.0+3656+f80bfa1drubygem-abrt-doc-0.3.0-4.module+el8.1.0+3656+f80bfa1d.noarch.rpm
RedHatanynoarchrubygem-pg-doc< 1.0.0-2.module+el8.1.0+3656+f80bfa1drubygem-pg-doc-1.0.0-2.module+el8.1.0+3656+f80bfa1d.noarch.rpm
RedHatanynoarchrubygems< 2.7.6.2-105.module+el8.1.0+3656+f80bfa1drubygems-2.7.6.2-105.module+el8.1.0+3656+f80bfa1d.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	noarch	rubygems-devel	< 2.7.6.2-105.module+el8.1.0+3656+f80bfa1d	rubygems-devel-2.7.6.2-105.module+el8.1.0+3656+f80bfa1d.noarch.rpm
RedHat	any	x86_64	ruby-libs-debuginfo	< 2.5.5-105.module+el8.1.0+3656+f80bfa1d	ruby-libs-debuginfo-2.5.5-105.module+el8.1.0+3656+f80bfa1d.x86_64.rpm
RedHat	any	i686	rubygem-json	< 2.1.0-105.module+el8.1.0+3656+f80bfa1d	rubygem-json-2.1.0-105.module+el8.1.0+3656+f80bfa1d.i686.rpm
RedHat	any	ppc64le	rubygem-psych	< 3.0.2-105.module+el8.1.0+3656+f80bfa1d	rubygem-psych-3.0.2-105.module+el8.1.0+3656+f80bfa1d.ppc64le.rpm
RedHat	any	noarch	rubygem-minitest	< 5.10.3-105.module+el8.1.0+3656+f80bfa1d	rubygem-minitest-5.10.3-105.module+el8.1.0+3656+f80bfa1d.noarch.rpm
RedHat	any	noarch	rubygem-bundler-doc	< 1.16.1-4.module+el8.1.0+14085+cd0ba992	rubygem-bundler-doc-1.16.1-4.module+el8.1.0+14085+cd0ba992.noarch.rpm
RedHat	any	i686	rubygem-openssl	< 2.1.2-105.module+el8.1.0+3656+f80bfa1d	rubygem-openssl-2.1.2-105.module+el8.1.0+3656+f80bfa1d.i686.rpm
RedHat	any	noarch	rubygem-abrt-doc	< 0.3.0-4.module+el8.1.0+3656+f80bfa1d	rubygem-abrt-doc-0.3.0-4.module+el8.1.0+3656+f80bfa1d.noarch.rpm
RedHat	any	noarch	rubygem-pg-doc	< 1.0.0-2.module+el8.1.0+3656+f80bfa1d	rubygem-pg-doc-1.0.0-2.module+el8.1.0+3656+f80bfa1d.noarch.rpm
RedHat	any	noarch	rubygems	< 2.7.6.2-105.module+el8.1.0+3656+f80bfa1d	rubygems-2.7.6.2-105.module+el8.1.0+3656+f80bfa1d.noarch.rpm