Headline

RHSA-2022:5338: Red Hat Security Advisory: ruby:2.6 security, bug fix, and enhancement update

An update for the ruby:2.6 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Related CVEs:

CVE-2022-28739: Ruby: Buffer overrun in String-to-Float conversion

2 years ago

Red Hat Security Data

Open in Source

#sql #vulnerability #linux #red_hat #js #telnet #ibm #ruby #mongo #sap #ssl

Synopsis

Moderate: ruby:2.6 security, bug fix, and enhancement update

Type/Severity

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for the ruby:2.6 module is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

The following packages have been upgraded to a later upstream version: ruby (2.6.10). (BZ#2089374)

Security Fix(es):

Ruby: Buffer overrun in String-to-Float conversion (CVE-2022-28739)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Products

Red Hat Enterprise Linux for x86_64 8 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6 x86_64
Red Hat Enterprise Linux Server - AUS 8.6 x86_64
Red Hat Enterprise Linux for IBM z Systems 8 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6 s390x
Red Hat Enterprise Linux for Power, little endian 8 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6 ppc64le
Red Hat Enterprise Linux Server - TUS 8.6 x86_64
Red Hat Enterprise Linux for ARM 64 8 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6 aarch64
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64

Fixes

BZ - 2075687 - CVE-2022-28739 Ruby: Buffer overrun in String-to-Float conversion
BZ - 2089374 - ruby:2.6/ruby: Rebase to the latest Ruby 2.6 point release [rhel-8] [rhel-8.6.0.z]

Red Hat Enterprise Linux for x86_64 8

SRPM

ruby-2.6.10-109.module+el8.6.0+15475+c55337b4.src.rpm

SHA-256: 6c2485393df4d6ad67bad25356520357afb3ffce9db24dde3112731f9cc8d88a

rubygem-abrt-0.3.0-4.module+el8.1.0+3653+beb38eb0.src.rpm

SHA-256: 3fcbe3bc8c60face0300cf3ed45e4ec21fd6df3071c2ea36d359c3093ebd0dbb

rubygem-bson-4.5.0-1.module+el8.1.0+3653+beb38eb0.src.rpm

SHA-256: 7831b53ebe6e4ce287da95165901c4b0a2459887bb7fd18149df1645576f4434

rubygem-mongo-2.8.0-1.module+el8.1.0+3653+beb38eb0.src.rpm

SHA-256: f3c8d96ecb5e6b2b18e29bdb3cc7be40d9c531556356344b6909c8f325356007

rubygem-mysql2-0.5.2-1.module+el8.1.0+3653+beb38eb0.src.rpm

SHA-256: 0bba0d381e8e6753a2e60a8c436a9d58dc4c14e6c30a40db8d63e704c69eca58

rubygem-pg-1.1.4-1.module+el8.1.0+3653+beb38eb0.src.rpm

SHA-256: 9d91431e97fa54b274f2a9c423e9b1c1ef8a5a879e91405e705017a6d4a07ece

x86_64

ruby-doc-2.6.10-109.module+el8.6.0+15475+c55337b4.noarch.rpm

SHA-256: 10038720157f1856a6501db60978d4f2b7d02b879a0ca1ea5ff93667ae5b2ea2

rubygem-abrt-0.3.0-4.module+el8.1.0+3653+beb38eb0.noarch.rpm

SHA-256: 837f466df4d8b85f0804081129db4b2f0973a18aa27ccab947c8924b286968ea

rubygem-abrt-doc-0.3.0-4.module+el8.1.0+3653+beb38eb0.noarch.rpm

SHA-256: 2b1eb7462d48e372d5c9d984a784cfd4a5891d4adb5bb5b3e30d5f58348c7dce

rubygem-bson-doc-4.5.0-1.module+el8.1.0+3653+beb38eb0.noarch.rpm

SHA-256: be62774bd0962078492e843559076e2b9ffa9f1937a148f8e9eb54611a9d1a09

rubygem-bundler-1.17.2-109.module+el8.6.0+15475+c55337b4.noarch.rpm

SHA-256: cb957a162828a4e28e9d1a454b5994d97a02829d63ec11061b171f22ec30ce47

rubygem-did_you_mean-1.3.0-109.module+el8.6.0+15475+c55337b4.noarch.rpm

SHA-256: 282d699ff75142fb5020b0b6db7ac03668c7cc683424f340f4f2755e0ba1a7b3

rubygem-irb-1.0.0-109.module+el8.6.0+15475+c55337b4.noarch.rpm

SHA-256: 0d847ad757004938d2f5c3a558ce4fb813aec29700c1909789f16f169716ab85

rubygem-minitest-5.11.3-109.module+el8.6.0+15475+c55337b4.noarch.rpm

SHA-256: 0a1c28cde160cb6d8c4092198d183f01f0b58628d570e9c1a48efedc8ce7eaed

rubygem-mongo-2.8.0-1.module+el8.1.0+3653+beb38eb0.noarch.rpm

SHA-256: 269f82b5979443f6755badefa110bdd33bf5badcfd4d549af37b6b230ca67b0a

rubygem-mongo-doc-2.8.0-1.module+el8.1.0+3653+beb38eb0.noarch.rpm

SHA-256: cfb71d26294990d14c5e4225e3be115c79cf48ad1bde0a66ad2ea7641683c99d

rubygem-mysql2-doc-0.5.2-1.module+el8.1.0+3653+beb38eb0.noarch.rpm

SHA-256: 54ee4063ef55c6534633001cbfdd487989ccc7587b3261b37d4e9e5e48eee6be

rubygem-net-telnet-0.2.0-109.module+el8.6.0+15475+c55337b4.noarch.rpm

SHA-256: 28270ebc850ee84aa29094cbd8a113e6125033929441caca12ff22c8ddcb67cf

rubygem-pg-doc-1.1.4-1.module+el8.1.0+3653+beb38eb0.noarch.rpm

SHA-256: 2c9e5fad1def2b234b8050271e2dc6e082a71b5ec85299adf09453f078007f18

rubygem-power_assert-1.1.3-109.module+el8.6.0+15475+c55337b4.noarch.rpm

SHA-256: bf77757f4406dc6e6d6231c9bda904d0a4dc2d4d77bc437d46b3ab346a71f00f

rubygem-rake-12.3.3-109.module+el8.6.0+15475+c55337b4.noarch.rpm

SHA-256: 2617c698e382837984645502945fa8a07b32378c874192e9c0d9fb881d830fef

rubygem-rdoc-6.1.2.1-109.module+el8.6.0+15475+c55337b4.noarch.rpm

SHA-256: 37c110960a8c8d3e4aeb7fc844b9ee7994dc70a0ade71701bd65deda8acfd1e0

rubygem-test-unit-3.2.9-109.module+el8.6.0+15475+c55337b4.noarch.rpm

SHA-256: a3044c3a2cda6fc26854e88ae7dc3b3b3bb99943859074a71fde2cac9788e5c7

rubygem-xmlrpc-0.3.0-109.module+el8.6.0+15475+c55337b4.noarch.rpm

SHA-256: da39c959d6dcfe3d3c04c07f874b0f6ef54121464023b5fdb5a7f91427c2eb5a

rubygems-3.0.3.1-109.module+el8.6.0+15475+c55337b4.noarch.rpm

SHA-256: fa187f131cd4183fba7b8833992f39bb8935ee0ed86499730dd1c603cbe72b5c

rubygems-devel-3.0.3.1-109.module+el8.6.0+15475+c55337b4.noarch.rpm

SHA-256: 177518c6e19aeac8282dacf3936b82fe122127f2d6a62861635caed50a0a1dfa

ruby-2.6.10-109.module+el8.6.0+15475+c55337b4.i686.rpm

SHA-256: 3240d1f782a91e0beff608a283b63fe74526ddedb7722b868e889a5e2e1d19c4

ruby-2.6.10-109.module+el8.6.0+15475+c55337b4.x86_64.rpm

SHA-256: 50ca1fb3d2f6c18bc5af51b68ce2e0a64f4be8a9117e0ce9957912029ea764fa

ruby-debuginfo-2.6.10-109.module+el8.6.0+15475+c55337b4.i686.rpm

SHA-256: 2d7a81f1f748c6bfdfd553745cd2e42bcace335c6e0d652e2dcd4c66dcff2ccb

ruby-debuginfo-2.6.10-109.module+el8.6.0+15475+c55337b4.x86_64.rpm

SHA-256: da45b712058a2ca774915adb0cb29c4d0de57449dd29790f8536a2798b55ec42

ruby-debugsource-2.6.10-109.module+el8.6.0+15475+c55337b4.i686.rpm

SHA-256: f62bbe08a80a683f60f41ab03e92f3ba251f81b526374ef1f70fc4e8c719499f

ruby-debugsource-2.6.10-109.module+el8.6.0+15475+c55337b4.x86_64.rpm

SHA-256: 42c7705f5dc0b994daacfcc0f1ae696370abea0c4e4e3abe98f94da3557910ba

ruby-devel-2.6.10-109.module+el8.6.0+15475+c55337b4.i686.rpm

SHA-256: ce2f51145079aa6aa7d3282951f88def5aab237caceadee22888d76f7e084680

ruby-devel-2.6.10-109.module+el8.6.0+15475+c55337b4.x86_64.rpm

SHA-256: a344bce9505ac2c642b5ba663acf171add43c217ce6012bab6d3c59cd653bd7e

ruby-libs-2.6.10-109.module+el8.6.0+15475+c55337b4.i686.rpm

SHA-256: 789e4ac85db2405a8ade7208e6ffdee1101ac0b15b014859b0cf22aa8eeabc72

ruby-libs-2.6.10-109.module+el8.6.0+15475+c55337b4.x86_64.rpm

SHA-256: 77ac956e8fa0649d505120aace143aeda86a3e995fe2189f313196612504cb4f

ruby-libs-debuginfo-2.6.10-109.module+el8.6.0+15475+c55337b4.i686.rpm

SHA-256: 203961a7e17aa468f68c8b55f6a7bb340923504619fffc1ab76f8bf2e813a3df

ruby-libs-debuginfo-2.6.10-109.module+el8.6.0+15475+c55337b4.x86_64.rpm

SHA-256: 241f27fa911f3da480540dc9d51516b0da2a883c94c856e3f76d2312f09a8244

rubygem-bigdecimal-1.4.1-109.module+el8.6.0+15475+c55337b4.i686.rpm

SHA-256: f13deec82a26c056f39c3e63114f93b84720ad7afb2b709674edc0ffeb559ea1

rubygem-bigdecimal-1.4.1-109.module+el8.6.0+15475+c55337b4.x86_64.rpm

SHA-256: d77b8143eab5864b05f5aec24cef7001b01d782f10862c7145e6e8dfeeaf758a

rubygem-bigdecimal-debuginfo-1.4.1-109.module+el8.6.0+15475+c55337b4.i686.rpm

SHA-256: 40630c871d6f9c09a9890926f88a887e929c4825793ef5081d0271c66fbfe970

rubygem-bigdecimal-debuginfo-1.4.1-109.module+el8.6.0+15475+c55337b4.x86_64.rpm

SHA-256: e00b4e683fec4101209e4d7581e20d5182d7f61b7b25990621de9287cfaee381

rubygem-bson-4.5.0-1.module+el8.1.0+3653+beb38eb0.x86_64.rpm

SHA-256: ea0636c15a386f5bf5784c8bf806965170c5e08cc443925c60f64fc2c62c0732

rubygem-bson-debuginfo-4.5.0-1.module+el8.1.0+3653+beb38eb0.x86_64.rpm

SHA-256: 902fc597202c00887c7fe1c034c3716ba939c37435166ccbdf4931e1dd9f0f15

rubygem-bson-debugsource-4.5.0-1.module+el8.1.0+3653+beb38eb0.x86_64.rpm

SHA-256: 25220b3dc705e37e831a7c03d8d6087671c311d127217792413e23767c86437d

rubygem-io-console-0.4.7-109.module+el8.6.0+15475+c55337b4.i686.rpm

SHA-256: faf08d29988b959a403af0ec951df9dee34932168e95587a0396ded6ce61724d

rubygem-io-console-0.4.7-109.module+el8.6.0+15475+c55337b4.x86_64.rpm

SHA-256: a3d6b1b3bccd338e58c6d0f40996a048ad29eac7d090914346b934ccc37fb3f2

rubygem-io-console-debuginfo-0.4.7-109.module+el8.6.0+15475+c55337b4.i686.rpm

SHA-256: 487f7c0a124ee069f1bbff71951fe4ae73283b458e9859acebae1872b0e4ab02

rubygem-io-console-debuginfo-0.4.7-109.module+el8.6.0+15475+c55337b4.x86_64.rpm

SHA-256: b1e208a0b341b49d3eae01cbee29ee16067fd19dcb109696bf076918dd16bc5b

rubygem-json-2.1.0-109.module+el8.6.0+15475+c55337b4.i686.rpm

SHA-256: 9f5ea3c5585d32b5f447757f73fa028d12b0093eb65a3695e5df29e7a9c79047

rubygem-json-2.1.0-109.module+el8.6.0+15475+c55337b4.x86_64.rpm

SHA-256: 23472b49e62cdb74a872dbf5ae94174581b2e030befd73c3b02706aaa665b6c7

rubygem-json-debuginfo-2.1.0-109.module+el8.6.0+15475+c55337b4.i686.rpm

SHA-256: 5b94b9c6b83057be683da2890dc259be21d52c5f865918f1d9d8f1ded221c4b6

rubygem-json-debuginfo-2.1.0-109.module+el8.6.0+15475+c55337b4.x86_64.rpm

SHA-256: f714e6d98f24146ae373bd80498dd45a914ae8aec9a824da4ad1e98c40701be0

rubygem-mysql2-0.5.2-1.module+el8.1.0+3653+beb38eb0.x86_64.rpm

SHA-256: 82bb6f741c2158503d39ba327a9a18d7c30e845473e7274bdd2056bdca3d10bc

rubygem-mysql2-debuginfo-0.5.2-1.module+el8.1.0+3653+beb38eb0.x86_64.rpm

SHA-256: 0b1ea3f6323b35f2c5c523ac195e7a825546d870afa7f66376173ea94d65ee9a

rubygem-mysql2-debugsource-0.5.2-1.module+el8.1.0+3653+beb38eb0.x86_64.rpm

SHA-256: bde361f51c07a57b238fb376822c67387ccfee85e42d6ae3a9e99cdd9f9c423d

rubygem-openssl-2.1.2-109.module+el8.6.0+15475+c55337b4.i686.rpm

SHA-256: da8feeb193481d586f7fc22ee1e19d3ca005b8f5bf6866299a2869cb1a5b2eb0

rubygem-openssl-2.1.2-109.module+el8.6.0+15475+c55337b4.x86_64.rpm

SHA-256: 7c36cec5ddfe76bb16e5107c5be5fab5ab67b9553954cf9999cf0fa27c0bfd84

rubygem-openssl-debuginfo-2.1.2-109.module+el8.6.0+15475+c55337b4.i686.rpm

SHA-256: b3120e05cceae0a688e1dae6ebc34f487721906979adfbe6c9624e261b86f45f

rubygem-openssl-debuginfo-2.1.2-109.module+el8.6.0+15475+c55337b4.x86_64.rpm

SHA-256: 65789aa4074507193bb44140975d7ac94dba86994fcbaf672b5a36ea7de347fb

rubygem-pg-1.1.4-1.module+el8.1.0+3653+beb38eb0.x86_64.rpm

SHA-256: a11746a72b4878898766e4710e21227b38832772d587016f4ed7ecef8c05af5b

rubygem-pg-debuginfo-1.1.4-1.module+el8.1.0+3653+beb38eb0.x86_64.rpm

SHA-256: 9a5f97dffa5e296092daa81504369809b8f2b8e03f04521af6d2c103644d00ca

rubygem-pg-debugsource-1.1.4-1.module+el8.1.0+3653+beb38eb0.x86_64.rpm

SHA-256: b82fc0d53798d8d3e62c11effc58985f84ad819e63d101aa99ddf924d9fa55c1

rubygem-psych-3.1.0-109.module+el8.6.0+15475+c55337b4.i686.rpm

SHA-256: 358ba34a344339316f5244bc48d502ddd085e38b504b67649b5f2ee01e3f7667

rubygem-psych-3.1.0-109.module+el8.6.0+15475+c55337b4.x86_64.rpm

SHA-256: 97183adacc6f89ad30c27971fa8638278677190cd6eba0aaf8f36398a860cef0

rubygem-psych-debuginfo-3.1.0-109.module+el8.6.0+15475+c55337b4.i686.rpm

SHA-256: 634e43223770c84832374a31c2169cc924182fe5fb9f92301baf2b68af4bf5b0

rubygem-psych-debuginfo-3.1.0-109.module+el8.6.0+15475+c55337b4.x86_64.rpm

SHA-256: 3b27abd1f1a0ffdb18fad6037eb2de960d968207a612c52f9a003879fd5ba7e5

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6