Headline

RHSA-2022:6447: Red Hat Security Advisory: ruby:2.7 security, bug fix, and enhancement update

An update for the ruby:2.7 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Related CVEs:

CVE-2021-41817: ruby: Regular expression denial of service vulnerability of Date parsing methods
CVE-2021-41819: ruby: Cookie prefix spoofing in CGI::Cookie.parse
CVE-2022-28739: Ruby: Buffer overrun in String-to-Float conversion

2 years ago

Red Hat Security Data

Open in Source

#sql #vulnerability #linux #red_hat #dos #js #telnet #ibm #ruby #mongo #sap #ssl

Synopsis

Moderate: ruby:2.7 security, bug fix, and enhancement update

Type/Severity

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for the ruby:2.7 module is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

The following packages have been upgraded to a later upstream version: ruby (2.7.6). (BZ#2109424)

Security Fix(es):

ruby: Regular expression denial of service vulnerability of Date parsing methods (CVE-2021-41817)
ruby: Cookie prefix spoofing in CGI::Cookie.parse (CVE-2021-41819)
Ruby: Buffer overrun in String-to-Float conversion (CVE-2022-28739)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Products

Red Hat Enterprise Linux for x86_64 8 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6 x86_64
Red Hat Enterprise Linux Server - AUS 8.6 x86_64
Red Hat Enterprise Linux for IBM z Systems 8 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6 s390x
Red Hat Enterprise Linux for Power, little endian 8 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6 ppc64le
Red Hat Enterprise Linux Server - TUS 8.6 x86_64
Red Hat Enterprise Linux for ARM 64 8 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6 aarch64
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64

Fixes

BZ - 2025104 - CVE-2021-41817 ruby: Regular expression denial of service vulnerability of Date parsing methods
BZ - 2026757 - CVE-2021-41819 ruby: Cookie prefix spoofing in CGI::Cookie.parse
BZ - 2075687 - CVE-2022-28739 Ruby: Buffer overrun in String-to-Float conversion
BZ - 2109424 - ruby:2.7/ruby: Rebase to the latest Ruby 2.7 release [rhel-8] [rhel-8.6.0.z]

Red Hat Enterprise Linux for x86_64 8

SRPM

ruby-2.7.6-138.module+el8.6.0+16148+54b2ba8f.src.rpm

SHA-256: 03712666dd4f6725de1f5d7b6d6edd52d70f1455e46130c359fec276121e70bb

rubygem-abrt-0.4.0-1.module+el8.3.0+7192+4e3a532a.src.rpm

SHA-256: 5c00b1af2b61471e6f6973898a4562a4ded854cb6cfb15886bf9c9d75ee6ddd1

rubygem-bson-4.8.1-1.module+el8.3.0+7192+4e3a532a.src.rpm

SHA-256: 125e1ca860cba81e60a7e2c2c84ff8a5e34f69daf2a23913a0eaf56d476733d1

rubygem-mongo-2.11.3-1.module+el8.3.0+7192+4e3a532a.src.rpm

SHA-256: ad6bc23c25ef27b4b81bbee91e21298aaf717636eaf605da8fbdb3b4973a6014

rubygem-mysql2-0.5.3-1.module+el8.3.0+7192+4e3a532a.src.rpm

SHA-256: b060aa8f57f7a08f2fee567ff9bb287dc8774c2ade577b6fe440248ceb633a85

rubygem-pg-1.2.3-1.module+el8.3.0+7192+4e3a532a.src.rpm

SHA-256: 054b02df78df1695f689b6477b7c48d4a7444593fc1f70a573cbefd7581249ce

x86_64

ruby-default-gems-2.7.6-138.module+el8.6.0+16148+54b2ba8f.noarch.rpm

SHA-256: f3f582aaf237963461a4fcae969875e4a25aadd95228de32f579a7c5ee61309e

ruby-doc-2.7.6-138.module+el8.6.0+16148+54b2ba8f.noarch.rpm

SHA-256: f9f419617dc5a7720672e35f395eaebf3c737140a9421924d34e389fd24d7c94

rubygem-abrt-0.4.0-1.module+el8.3.0+7192+4e3a532a.noarch.rpm

SHA-256: 822b7c8cc8e3a8b587adb05d52fc799cd55ae8bfc1326c34fec926c4c835b321

rubygem-abrt-doc-0.4.0-1.module+el8.3.0+7192+4e3a532a.noarch.rpm

SHA-256: 5a4b454def8956088d939c18e452540e9bcb409c37e2d0d200e6741c5f2abbce

rubygem-bson-doc-4.8.1-1.module+el8.3.0+7192+4e3a532a.noarch.rpm

SHA-256: 462d5bd2fcb3fce80d88dd02f485f72512592bef868cdae94350b297b81a7f4a

rubygem-bundler-2.2.24-138.module+el8.6.0+16148+54b2ba8f.noarch.rpm

SHA-256: 765b903aac8982b4bd275b3542a7808d9f8e512a00da98bd7aa66518915b18e4

rubygem-irb-1.2.6-138.module+el8.6.0+16148+54b2ba8f.noarch.rpm

SHA-256: 1d3f6ff59aef62a0d915f04f2319b37322e72c0912cd49c848b6ec8cac2c73c2

rubygem-minitest-5.13.0-138.module+el8.6.0+16148+54b2ba8f.noarch.rpm

SHA-256: 8f191db1b02698180d676caca2e35798a5859eb40962df09022f631fbd346dbc

rubygem-mongo-2.11.3-1.module+el8.3.0+7192+4e3a532a.noarch.rpm

SHA-256: d093fc7d6192718257973e3d497598c18aa957bf2d1e7c7a23f5687da7309cef

rubygem-mongo-doc-2.11.3-1.module+el8.3.0+7192+4e3a532a.noarch.rpm

SHA-256: b1393d701a8a545900953c3aa7258f2069474fa339413ab9a7909b139b6c5436

rubygem-mysql2-doc-0.5.3-1.module+el8.3.0+7192+4e3a532a.noarch.rpm

SHA-256: 89a9565a56ceccb3b636a89f90ec015cc513b39b2f46004b70c4cfa948a1d068

rubygem-net-telnet-0.2.0-138.module+el8.6.0+16148+54b2ba8f.noarch.rpm

SHA-256: 7b73f9ee9c7032827c2a0e9f02b2a388419cf97336c5a9ae89c7dd9e3d56851d

rubygem-pg-doc-1.2.3-1.module+el8.3.0+7192+4e3a532a.noarch.rpm

SHA-256: c9615d9262e61b2124cbfa670bd4994055e6fdfab8fb591d780c9d8cc1743ec4

rubygem-power_assert-1.1.7-138.module+el8.6.0+16148+54b2ba8f.noarch.rpm

SHA-256: 20adf5acbd5902388375ef4d108bcad367eb3d77466d90e6a9646b2f99d81cef

rubygem-rake-13.0.1-138.module+el8.6.0+16148+54b2ba8f.noarch.rpm

SHA-256: 56d834eb7b2f3d29db2e06e3b565cf8e904965af124f2426d46228d6fbf649fa

rubygem-rdoc-6.2.1.1-138.module+el8.6.0+16148+54b2ba8f.noarch.rpm

SHA-256: dfdc5492eb3c9295ea532f93d8025ec1882f5439d3f3b7d6ed78da3e71e89ffb

rubygem-test-unit-3.3.4-138.module+el8.6.0+16148+54b2ba8f.noarch.rpm

SHA-256: 92e7b30bf35bfc97593e0801cdaf6c6312774f53036769030c3bde33e83c7abf

rubygem-xmlrpc-0.3.0-138.module+el8.6.0+16148+54b2ba8f.noarch.rpm

SHA-256: 40c146140b38356e05309dc1dffa7b71283f2c77b962b2ee2712b4b251dd7c2d

rubygems-3.1.6-138.module+el8.6.0+16148+54b2ba8f.noarch.rpm

SHA-256: 7f7e04e3333cf37586fdd49f8864aed392ce4f594d800b630ddf100490023257

rubygems-devel-3.1.6-138.module+el8.6.0+16148+54b2ba8f.noarch.rpm

SHA-256: 0d97d532706157d53e5839d8da480a4985abc90cf0e0bff918a4ef2246109c95

ruby-2.7.6-138.module+el8.6.0+16148+54b2ba8f.i686.rpm

SHA-256: e72dc339c55296d943d89a75ac0a0412e97febd0c067cee4a26c0b2fd4ed72ac

ruby-2.7.6-138.module+el8.6.0+16148+54b2ba8f.x86_64.rpm

SHA-256: 5316b4366acaaff80d75e171124b8bbd6feaaa367c13a4b8ccb0418385debe25

ruby-debuginfo-2.7.6-138.module+el8.6.0+16148+54b2ba8f.i686.rpm

SHA-256: 54044357e6291f98a8c1950a221fe63224b6a06523134b3a28141bf38a94ebb6

ruby-debuginfo-2.7.6-138.module+el8.6.0+16148+54b2ba8f.x86_64.rpm

SHA-256: d4dac4d3b5406b2e4bced01d96e066c1e8fa2af67365769b864a45da113dbee1

ruby-debugsource-2.7.6-138.module+el8.6.0+16148+54b2ba8f.i686.rpm

SHA-256: 84227a8086691bf56b01241b662ea87557af3f57ba1e4815c483afb1be6641d0

ruby-debugsource-2.7.6-138.module+el8.6.0+16148+54b2ba8f.x86_64.rpm

SHA-256: 68ad0aeb84d3be4d8dbd74891a86f1a48da09fe48c3c3d83fb605af389c850a4

ruby-devel-2.7.6-138.module+el8.6.0+16148+54b2ba8f.i686.rpm

SHA-256: 4d52bd2625f99057f64e5ec83de015c50ae45ae9db2e1d399be6078ad634847c

ruby-devel-2.7.6-138.module+el8.6.0+16148+54b2ba8f.x86_64.rpm

SHA-256: 461bafed65a24de2750fad15586d595d074ecda54b7935d72f95d98d370d304d

ruby-libs-2.7.6-138.module+el8.6.0+16148+54b2ba8f.i686.rpm

SHA-256: 10c8805475a4c0fead59a42d05ac835c2ff87d3ffc088e8447dee6b95fd518bc

ruby-libs-2.7.6-138.module+el8.6.0+16148+54b2ba8f.x86_64.rpm

SHA-256: ea83689c9954dfcf5d306198ad28ad557288d9aabf5955eba400465f7af4c944

ruby-libs-debuginfo-2.7.6-138.module+el8.6.0+16148+54b2ba8f.i686.rpm

SHA-256: 269e73f5aa1550d491860b62b6577f47caae748f6afe0451d55e1f0529b119b1

ruby-libs-debuginfo-2.7.6-138.module+el8.6.0+16148+54b2ba8f.x86_64.rpm

SHA-256: 60087f5a11eed2b40f6303e4e42adf5787b262f1a6b7e92c9ca2f60f96f873bb

rubygem-bigdecimal-2.0.0-138.module+el8.6.0+16148+54b2ba8f.i686.rpm

SHA-256: 32c41c789c04020e84112b4781c30fb3aa983ea66672b41a277fc46d120c5175

rubygem-bigdecimal-2.0.0-138.module+el8.6.0+16148+54b2ba8f.x86_64.rpm

SHA-256: 7992bb9475a5606082296e883dd31efafa98c2f2eb1677ccae6bf3e5f8a21c89

rubygem-bigdecimal-debuginfo-2.0.0-138.module+el8.6.0+16148+54b2ba8f.i686.rpm

SHA-256: f96642f74ae055fe9dcbfdecfb2300e5c4095278a226a5179857f73dcce4a2f8

rubygem-bigdecimal-debuginfo-2.0.0-138.module+el8.6.0+16148+54b2ba8f.x86_64.rpm

SHA-256: 2116127760cf5bc81f5bb222992516abf2d5e81c083dc2f6a06666a4c9558f27

rubygem-bson-4.8.1-1.module+el8.3.0+7192+4e3a532a.x86_64.rpm

SHA-256: d1c9c6f3355e1146f9d723dd772495a49c9569b2c4edc2929d66a176a5e158cb

rubygem-bson-debuginfo-4.8.1-1.module+el8.3.0+7192+4e3a532a.x86_64.rpm

SHA-256: 2ec6b243478d996ac232f2d0b427181f166ae25af08ee17106da63868b218db1

rubygem-bson-debugsource-4.8.1-1.module+el8.3.0+7192+4e3a532a.x86_64.rpm

SHA-256: abacf55576f9d57e0777032c73c3924c704a2ada09d2770ec0e36cc3fca80527

rubygem-io-console-0.5.6-138.module+el8.6.0+16148+54b2ba8f.i686.rpm

SHA-256: 4a38fc1e82eed3185c2ff682a6bb1ef3e8fdc0997ec70a45dccad0f9492d4a38

rubygem-io-console-0.5.6-138.module+el8.6.0+16148+54b2ba8f.x86_64.rpm

SHA-256: 98f1ae56747fb3d4fb92e3353b27390e539f7492c1eb96f54eff4ba89c42e7d8

rubygem-io-console-debuginfo-0.5.6-138.module+el8.6.0+16148+54b2ba8f.i686.rpm

SHA-256: f262a5c906e64a3f97e973132307cf2e0f559937f3f012f59330d99fe535e42d

rubygem-io-console-debuginfo-0.5.6-138.module+el8.6.0+16148+54b2ba8f.x86_64.rpm

SHA-256: 1601dc5ff553687046a31895a083252bac6b7f4b68acdceea42c9ab6b6ddd1c9

rubygem-json-2.3.0-138.module+el8.6.0+16148+54b2ba8f.i686.rpm

SHA-256: 4dbe02f82de73765e77f462b43ef165ab7a8961e3c38bc3676b240e27b10f6c2

rubygem-json-2.3.0-138.module+el8.6.0+16148+54b2ba8f.x86_64.rpm

SHA-256: 2d57bd5d83c42aef7a693841e465dbdb4c941ab97bf6a7bb8e5068040394161a

rubygem-json-debuginfo-2.3.0-138.module+el8.6.0+16148+54b2ba8f.i686.rpm

SHA-256: 404b094ff448a514e3f3882b706dc0723fa2a90b24c4b32c2c7fc814bc26b0c7

rubygem-json-debuginfo-2.3.0-138.module+el8.6.0+16148+54b2ba8f.x86_64.rpm

SHA-256: c71f3dc06f313c6bff1c23e54dd5b21626fe474cf72afbbdfa9dbc864ea89ae0

rubygem-mysql2-0.5.3-1.module+el8.3.0+7192+4e3a532a.x86_64.rpm

SHA-256: a713073d2f7775737a4db2dfab9e254bbd5b93c34b235d2e91c132c0fc30cb24

rubygem-mysql2-debuginfo-0.5.3-1.module+el8.3.0+7192+4e3a532a.x86_64.rpm

SHA-256: 6370e8570b2499ff1ad5d0652f5082cc8aa7e23c2b6b44241e52c1aa449e4a01

rubygem-mysql2-debugsource-0.5.3-1.module+el8.3.0+7192+4e3a532a.x86_64.rpm

SHA-256: 49505b6aadfb0e47f8b80a30b16db020ee24d0d7e469dba87fdd71b9efe0c177

rubygem-openssl-2.1.3-138.module+el8.6.0+16148+54b2ba8f.i686.rpm

SHA-256: a3e410caa5f3cb6f21b6cecb257a699a4afdb3a8372a3bf9a1acab2dc6f54535

rubygem-openssl-2.1.3-138.module+el8.6.0+16148+54b2ba8f.x86_64.rpm

SHA-256: dd9562d21817d96d8729c557a3dade929124d983c27f9340d1a9f63b1060183f

rubygem-openssl-debuginfo-2.1.3-138.module+el8.6.0+16148+54b2ba8f.i686.rpm

SHA-256: febacb74998167d7564b519e7758a2380d1c5fe18c9ad3554696d932f2ddba96

rubygem-openssl-debuginfo-2.1.3-138.module+el8.6.0+16148+54b2ba8f.x86_64.rpm

SHA-256: 6967ac043c1dcb8e9701232e4005b20053341fc5a392666fb3daf1b1c9f6475f

rubygem-pg-1.2.3-1.module+el8.3.0+7192+4e3a532a.x86_64.rpm

SHA-256: 70b14fbefbdd9c84080494a0d65c5870416f7ed7eb80c1dabea6be4f86b12d3d

rubygem-pg-debuginfo-1.2.3-1.module+el8.3.0+7192+4e3a532a.x86_64.rpm

SHA-256: ca6d98cbade87ff6fd76d5041a5f3e0bc75e52d76934b5f22ea45ef511b4fb7d

rubygem-pg-debugsource-1.2.3-1.module+el8.3.0+7192+4e3a532a.x86_64.rpm

SHA-256: 2021e5a6e7e9ff093844d96dd140a46de07ae4604f3400e889eff7af029feb27

rubygem-psych-3.1.0-138.module+el8.6.0+16148+54b2ba8f.i686.rpm

SHA-256: ce8ec855a1e9149d349740045a6c3e43409ae78993f46589cf455557b63b61e4

rubygem-psych-3.1.0-138.module+el8.6.0+16148+54b2ba8f.x86_64.rpm

SHA-256: 9076553e549a8fa2bf21aebcc75fb86291ac5d721f9657cb8de1dc2206f1ffae

rubygem-psych-debuginfo-3.1.0-138.module+el8.6.0+16148+54b2ba8f.i686.rpm

SHA-256: 37e361f42593a8e4fd59cd760d3ca47ced2c5d0c8f0e882b37159a5976b377ae

rubygem-psych-debuginfo-3.1.0-138.module+el8.6.0+16148+54b2ba8f.x86_64.rpm

SHA-256: cfb617d1aa91bd17af09e3878d3c7a4125000a4a7fba76b6742b7fa9b6be71d1

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6