Headline

RHSA-2022:0543: Red Hat Security Advisory: ruby:2.6 security update

An update for the ruby:2.6 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Related CVEs:

CVE-2020-36327: rubygem-bundler: Dependencies of gems with explicit source may be installed from a different source
CVE-2021-31799: rubygem-rdoc: Command injection vulnerability in RDoc
CVE-2021-31810: ruby: FTP PASV command response can cause Net::FTP to connect to arbitrary host
CVE-2021-32066: ruby: StartTLS stripping vulnerability in Net::IMAP
CVE-2021-41817: ruby: Regular expression denial of service vulnerability of Date parsing methods
CVE-2021-41819: ruby: Cookie prefix spoofing in CGI::Cookie.parse

2 years ago

Red Hat Security Data

Open in Source

#sql #vulnerability #linux #red_hat #dos #js

Synopsis

Important: ruby:2.6 security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for the ruby:2.6 module is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

rubygem-bundler: Dependencies of gems with explicit source may be installed from a different source (CVE-2020-36327)
rubygem-rdoc: Command injection vulnerability in RDoc (CVE-2021-31799)
ruby: FTP PASV command response can cause Net::FTP to connect to arbitrary host (CVE-2021-31810)
ruby: StartTLS stripping vulnerability in Net::IMAP (CVE-2021-32066)
ruby: Regular expression denial of service vulnerability of Date parsing methods (CVE-2021-41817)
ruby: Cookie prefix spoofing in CGI::Cookie.parse (CVE-2021-41819)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Products

Red Hat Enterprise Linux for x86_64 8 x86_64
Red Hat Enterprise Linux for IBM z Systems 8 s390x
Red Hat Enterprise Linux for Power, little endian 8 ppc64le
Red Hat Enterprise Linux for ARM 64 8 aarch64

Fixes

BZ - 1958999 - CVE-2020-36327 rubygem-bundler: Dependencies of gems with explicit source may be installed from a different source
BZ - 1980126 - CVE-2021-31810 ruby: FTP PASV command response can cause Net::FTP to connect to arbitrary host
BZ - 1980128 - CVE-2021-32066 ruby: StartTLS stripping vulnerability in Net::IMAP
BZ - 1980132 - CVE-2021-31799 rubygem-rdoc: Command injection vulnerability in RDoc
BZ - 2025104 - CVE-2021-41817 ruby: Regular expression denial of service vulnerability of Date parsing methods
BZ - 2026757 - CVE-2021-41819 ruby: Cookie prefix spoofing in CGI::Cookie.parse

CVEs

CVE-2020-36327
CVE-2021-31799
CVE-2021-31810
CVE-2021-32066
CVE-2021-41817
CVE-2021-41819

References

https://access.redhat.com/security/updates/classification/#important
https://access.redhat.com/articles/6206172

Red Hat Enterprise Linux for x86_64 8

SRPM

ruby-2.6.9-108.module+el8.5.0+13719+08a8ba32.src.rpm

SHA-256: b6ee25abd331e3d831fc636ab8e55c584bfb786841eb1acd4425d5b28f5abe49

rubygem-abrt-0.3.0-4.module+el8.1.0+3653+beb38eb0.src.rpm

SHA-256: 3fcbe3bc8c60face0300cf3ed45e4ec21fd6df3071c2ea36d359c3093ebd0dbb

rubygem-bson-4.5.0-1.module+el8.1.0+3653+beb38eb0.src.rpm

SHA-256: 7831b53ebe6e4ce287da95165901c4b0a2459887bb7fd18149df1645576f4434

rubygem-mongo-2.8.0-1.module+el8.1.0+3653+beb38eb0.src.rpm

SHA-256: f3c8d96ecb5e6b2b18e29bdb3cc7be40d9c531556356344b6909c8f325356007

rubygem-mysql2-0.5.2-1.module+el8.1.0+3653+beb38eb0.src.rpm

SHA-256: 0bba0d381e8e6753a2e60a8c436a9d58dc4c14e6c30a40db8d63e704c69eca58

rubygem-pg-1.1.4-1.module+el8.1.0+3653+beb38eb0.src.rpm

SHA-256: 9d91431e97fa54b274f2a9c423e9b1c1ef8a5a879e91405e705017a6d4a07ece

x86_64

ruby-2.6.9-108.module+el8.5.0+13719+08a8ba32.i686.rpm

SHA-256: c8c92f79e12bb483a78c21bb3a5e50b7412e2c539c4d5f376b1bd732129827cb

ruby-2.6.9-108.module+el8.5.0+13719+08a8ba32.x86_64.rpm

SHA-256: a0ef8a85f3eb4ba854a47f16e585638aa0313633e47a33f4bb0e8e936ce1e0bf

ruby-debuginfo-2.6.9-108.module+el8.5.0+13719+08a8ba32.i686.rpm

SHA-256: 2c84674f8378d2cf991492981353df53f6c1b118043a7e0a749f4382911bb699

ruby-debuginfo-2.6.9-108.module+el8.5.0+13719+08a8ba32.x86_64.rpm

SHA-256: 2a19092678596669fa5bd902a4e25c66129801fb8930a4156349845e34c9d920

ruby-debugsource-2.6.9-108.module+el8.5.0+13719+08a8ba32.i686.rpm

SHA-256: 0470dc9ad5d776743093892ec8f7eb733ae6538c612e3839660add5ceaece6db

ruby-debugsource-2.6.9-108.module+el8.5.0+13719+08a8ba32.x86_64.rpm

SHA-256: 7c3e6411ff9cbaace54bc8a72074c699f7dc10e8625e4d85358a9f156a98ac57

ruby-devel-2.6.9-108.module+el8.5.0+13719+08a8ba32.i686.rpm

SHA-256: f192714576d6016a6edfdaafe0c0639e03d8300c3a945148d57d00b0841e8141

ruby-devel-2.6.9-108.module+el8.5.0+13719+08a8ba32.x86_64.rpm

SHA-256: 7cd0f2ad0a1a10991ecce6d2b28691dd802f7db8359462cccd6122f73e2359a8

ruby-doc-2.6.9-108.module+el8.5.0+13719+08a8ba32.noarch.rpm

SHA-256: 4b5206b1c800b619ca65d44b5df3339db078a44f915661258d89ae0ad55f0c7b

ruby-libs-2.6.9-108.module+el8.5.0+13719+08a8ba32.i686.rpm

SHA-256: 4ba5e4a9b7b6b956bd5f2c39bd059a2272d2c4899ba3564a323eef4f11bb3e02

ruby-libs-2.6.9-108.module+el8.5.0+13719+08a8ba32.x86_64.rpm

SHA-256: 732bead329974dbf1986847f8f0d10f107b39f6a0b39035dad0d62fbbbb31c17

ruby-libs-debuginfo-2.6.9-108.module+el8.5.0+13719+08a8ba32.i686.rpm

SHA-256: d97990bda86cb51d0a88101209651a60cfcd468c03f1734d0ff0158c9f515bdd

ruby-libs-debuginfo-2.6.9-108.module+el8.5.0+13719+08a8ba32.x86_64.rpm

SHA-256: a3dd76b011c4e62e174c5dd2b882c831aacc999512d535e22c9eca105208bc9b

rubygem-abrt-0.3.0-4.module+el8.1.0+3653+beb38eb0.noarch.rpm

SHA-256: 837f466df4d8b85f0804081129db4b2f0973a18aa27ccab947c8924b286968ea

rubygem-abrt-doc-0.3.0-4.module+el8.1.0+3653+beb38eb0.noarch.rpm

SHA-256: 2b1eb7462d48e372d5c9d984a784cfd4a5891d4adb5bb5b3e30d5f58348c7dce

rubygem-bigdecimal-1.4.1-108.module+el8.5.0+13719+08a8ba32.i686.rpm

SHA-256: 03f2249b1c6f03b908da32e9855aa177ac28ebae56200af8d861eb3c2d181717

rubygem-bigdecimal-1.4.1-108.module+el8.5.0+13719+08a8ba32.x86_64.rpm

SHA-256: 63ecc895db11070a229dbe24a3503c0cc91b3b1e2270101fe50a483774aa7fe6

rubygem-bigdecimal-debuginfo-1.4.1-108.module+el8.5.0+13719+08a8ba32.i686.rpm

SHA-256: 75d7ae050b5a43a1f4883c20434096391839069baec8d6cbc9321406153bdc94

rubygem-bigdecimal-debuginfo-1.4.1-108.module+el8.5.0+13719+08a8ba32.x86_64.rpm

SHA-256: 1c02521608935a7acadeb42d5a199b11cf4583a3a689bb01a35fc474e5b8234f

rubygem-bson-4.5.0-1.module+el8.1.0+3653+beb38eb0.x86_64.rpm

SHA-256: ea0636c15a386f5bf5784c8bf806965170c5e08cc443925c60f64fc2c62c0732

rubygem-bson-debuginfo-4.5.0-1.module+el8.1.0+3653+beb38eb0.x86_64.rpm

SHA-256: 902fc597202c00887c7fe1c034c3716ba939c37435166ccbdf4931e1dd9f0f15

rubygem-bson-debugsource-4.5.0-1.module+el8.1.0+3653+beb38eb0.x86_64.rpm

SHA-256: 25220b3dc705e37e831a7c03d8d6087671c311d127217792413e23767c86437d

rubygem-bson-doc-4.5.0-1.module+el8.1.0+3653+beb38eb0.noarch.rpm

SHA-256: be62774bd0962078492e843559076e2b9ffa9f1937a148f8e9eb54611a9d1a09

rubygem-bundler-1.17.2-108.module+el8.5.0+13719+08a8ba32.noarch.rpm

SHA-256: 71871df8f2edbceecd35f68f4e92b9487e464499dff291f9d207ed01f9f58362

rubygem-did_you_mean-1.3.0-108.module+el8.5.0+13719+08a8ba32.noarch.rpm

SHA-256: 206b9adff37b4ecc13c9fafddc50692fc1541800b1e09e384d91cde3ab4426d4

rubygem-io-console-0.4.7-108.module+el8.5.0+13719+08a8ba32.i686.rpm

SHA-256: 0b7678975f335f05650e1d8492e727469bcbbc8d5602025e3ac12220c20ba3b7

rubygem-io-console-0.4.7-108.module+el8.5.0+13719+08a8ba32.x86_64.rpm

SHA-256: 294182392e35065360c979e9639b77da1c88818bf9bbb7c7134acdf7a0140e3c

rubygem-io-console-debuginfo-0.4.7-108.module+el8.5.0+13719+08a8ba32.i686.rpm

SHA-256: 26a3e9b4db8b918629ca1ad2af8091e79156168ed894b127f197f1628228a8d3

rubygem-io-console-debuginfo-0.4.7-108.module+el8.5.0+13719+08a8ba32.x86_64.rpm

SHA-256: 9ee87b270e03b5371310401a26507e450c921a31fd992ff4313df7561482fd1b

rubygem-irb-1.0.0-108.module+el8.5.0+13719+08a8ba32.noarch.rpm

SHA-256: 63f473b1681c110a3bfd824e83e2dff6566e461f6d664979454d96b835e8b5f7

rubygem-json-2.1.0-108.module+el8.5.0+13719+08a8ba32.i686.rpm

SHA-256: cb01ecdff4840986919983b5330ad208e4b33cea9695da3639fb7db32b7dfe9a

rubygem-json-2.1.0-108.module+el8.5.0+13719+08a8ba32.x86_64.rpm

SHA-256: dde719f8906b91fb01580b99f634cdd4646ed43c1f53e043268b62a6a3d40c04

rubygem-json-debuginfo-2.1.0-108.module+el8.5.0+13719+08a8ba32.i686.rpm

SHA-256: 218ceabc2c8202bac35767d6b5b7367ea717271b745dd41f4858218745782cbe

rubygem-json-debuginfo-2.1.0-108.module+el8.5.0+13719+08a8ba32.x86_64.rpm

SHA-256: f895d0cb27fec117ff728b6323463d5567f5d92bc0d65cf73b6b13837ca99de6

rubygem-minitest-5.11.3-108.module+el8.5.0+13719+08a8ba32.noarch.rpm

SHA-256: 4ae942c44c5c3e03a48cf992d991662c4dd0da0f2024f17ebabb34df3b2ffcc2

rubygem-mongo-2.8.0-1.module+el8.1.0+3653+beb38eb0.noarch.rpm

SHA-256: 269f82b5979443f6755badefa110bdd33bf5badcfd4d549af37b6b230ca67b0a

rubygem-mongo-doc-2.8.0-1.module+el8.1.0+3653+beb38eb0.noarch.rpm

SHA-256: cfb71d26294990d14c5e4225e3be115c79cf48ad1bde0a66ad2ea7641683c99d

rubygem-mysql2-0.5.2-1.module+el8.1.0+3653+beb38eb0.x86_64.rpm

SHA-256: 82bb6f741c2158503d39ba327a9a18d7c30e845473e7274bdd2056bdca3d10bc

rubygem-mysql2-debuginfo-0.5.2-1.module+el8.1.0+3653+beb38eb0.x86_64.rpm

SHA-256: 0b1ea3f6323b35f2c5c523ac195e7a825546d870afa7f66376173ea94d65ee9a

rubygem-mysql2-debugsource-0.5.2-1.module+el8.1.0+3653+beb38eb0.x86_64.rpm

SHA-256: bde361f51c07a57b238fb376822c67387ccfee85e42d6ae3a9e99cdd9f9c423d

rubygem-mysql2-doc-0.5.2-1.module+el8.1.0+3653+beb38eb0.noarch.rpm

SHA-256: 54ee4063ef55c6534633001cbfdd487989ccc7587b3261b37d4e9e5e48eee6be

rubygem-net-telnet-0.2.0-108.module+el8.5.0+13719+08a8ba32.noarch.rpm

SHA-256: 6ebfac90cc697ce427a4a2b3fa8c9566d0dcc6eaffec8fe02a0a72e725be5557

rubygem-openssl-2.1.2-108.module+el8.5.0+13719+08a8ba32.i686.rpm

SHA-256: 831104dbead641703792899bd03c57fa15f865824b83b783de4e69d956795adf

rubygem-openssl-2.1.2-108.module+el8.5.0+13719+08a8ba32.x86_64.rpm

SHA-256: 466158299e8e85f7035f2542150fb1f0930af7a7ede5c34492529528ba106e80

rubygem-openssl-debuginfo-2.1.2-108.module+el8.5.0+13719+08a8ba32.i686.rpm

SHA-256: 8803c633beb7ea66a0e4998a5f044edf5c33e42348eb9aadc6911b8fdad673df

rubygem-openssl-debuginfo-2.1.2-108.module+el8.5.0+13719+08a8ba32.x86_64.rpm

SHA-256: 6723b8a80e6873914574831ef1b833b25c74db4e6e02c2bc7f4c5a35990cb70f

rubygem-pg-1.1.4-1.module+el8.1.0+3653+beb38eb0.x86_64.rpm

SHA-256: a11746a72b4878898766e4710e21227b38832772d587016f4ed7ecef8c05af5b

rubygem-pg-debuginfo-1.1.4-1.module+el8.1.0+3653+beb38eb0.x86_64.rpm

SHA-256: 9a5f97dffa5e296092daa81504369809b8f2b8e03f04521af6d2c103644d00ca

rubygem-pg-debugsource-1.1.4-1.module+el8.1.0+3653+beb38eb0.x86_64.rpm

SHA-256: b82fc0d53798d8d3e62c11effc58985f84ad819e63d101aa99ddf924d9fa55c1

rubygem-pg-doc-1.1.4-1.module+el8.1.0+3653+beb38eb0.noarch.rpm

SHA-256: 2c9e5fad1def2b234b8050271e2dc6e082a71b5ec85299adf09453f078007f18

rubygem-power_assert-1.1.3-108.module+el8.5.0+13719+08a8ba32.noarch.rpm

SHA-256: 3654e913e7061a21d6712a842195bd22b62c1ef2c34e5a86a44d1283b5655fca

rubygem-psych-3.1.0-108.module+el8.5.0+13719+08a8ba32.i686.rpm

SHA-256: a6943b2aadebf07a3ce8c5ade827f2b40c013965146850d46ba3448f98020d25

rubygem-psych-3.1.0-108.module+el8.5.0+13719+08a8ba32.x86_64.rpm

SHA-256: 2d8be897b6232976e278d3ca71d4529c9ce57c6dbeb4917ffb4f3b7c35885308

rubygem-psych-debuginfo-3.1.0-108.module+el8.5.0+13719+08a8ba32.i686.rpm

SHA-256: f760e29ca8c33c27363fd712050bb88846f219704e77d0e1f33c5f99cc7b9545

rubygem-psych-debuginfo-3.1.0-108.module+el8.5.0+13719+08a8ba32.x86_64.rpm

SHA-256: 9a9a66052b3b265f06f45e47b8ba4d508f61bb62b91aa5a696dd781bf5e6ad3f

rubygem-rake-12.3.3-108.module+el8.5.0+13719+08a8ba32.noarch.rpm

SHA-256: 09881826f4a59e95ba773d79fb86f28663d05d088238fa52f5972b8dba38673b

rubygem-rdoc-6.1.2.1-108.module+el8.5.0+13719+08a8ba32.noarch.rpm

SHA-256: 47d79fe2a8feb32862f24e5614224b9cbc3833b40552abcce45801e85fcbc4bd

rubygem-test-unit-3.2.9-108.module+el8.5.0+13719+08a8ba32.noarch.rpm

SHA-256: 8a8b8eeb22f070b6bb90bf72a6235f4a24e0c8d5d293196752b65647c7eb696b

rubygem-xmlrpc-0.3.0-108.module+el8.5.0+13719+08a8ba32.noarch.rpm

SHA-256: 165caa09b49a6d7364ba0af9a6664c46f9a36f834b54c00b315662cf72a05eed

rubygems-3.0.3.1-108.module+el8.5.0+13719+08a8ba32.noarch.rpm

SHA-256: a6f23c9996dbd7d577fa8e7ea8d4ed2d3ade24b9c881b1bc4815ef91cbf27604

rubygems-devel-3.0.3.1-108.module+el8.5.0+13719+08a8ba32.noarch.rpm

SHA-256: c1c5abe51d930de5debb0b942233770d3dae07e7bdb49516e7787d9f1c68762f

Red Hat Enterprise Linux for IBM z Systems 8