Headline

RHSA-2022:0544: Red Hat Security Advisory: ruby:2.6 security update

An update for the ruby:2.6 module is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Related CVEs:

CVE-2020-36327: rubygem-bundler: Dependencies of gems with explicit source may be installed from a different source
CVE-2021-31799: rubygem-rdoc: Command injection vulnerability in RDoc
CVE-2021-31810: ruby: FTP PASV command response can cause Net::FTP to connect to arbitrary host
CVE-2021-32066: ruby: StartTLS stripping vulnerability in Net::IMAP
CVE-2021-41817: ruby: Regular expression denial of service vulnerability of Date parsing methods
CVE-2021-41819: ruby: Cookie prefix spoofing in CGI::Cookie.parse

2 years ago

Red Hat Security Data

Open in Source

#sql #vulnerability #linux #red_hat #dos #js

Synopsis

Important: ruby:2.6 security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for the ruby:2.6 module is now available for Red Hat Enterprise Linux 8.4 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

rubygem-bundler: Dependencies of gems with explicit source may be installed from a different source (CVE-2020-36327)
rubygem-rdoc: Command injection vulnerability in RDoc (CVE-2021-31799)
ruby: FTP PASV command response can cause Net::FTP to connect to arbitrary host (CVE-2021-31810)
ruby: StartTLS stripping vulnerability in Net::IMAP (CVE-2021-32066)
ruby: Regular expression denial of service vulnerability of Date parsing methods (CVE-2021-41817)
ruby: Cookie prefix spoofing in CGI::Cookie.parse (CVE-2021-41819)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Products

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.4 x86_64
Red Hat Enterprise Linux Server - AUS 8.4 x86_64
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.4 s390x
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.4 ppc64le
Red Hat Enterprise Linux Server - TUS 8.4 x86_64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.4 aarch64
Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 8.4 ppc64le
Red Hat Enterprise Linux Server - Update Services for SAP Solutions 8.4 x86_64

Fixes

BZ - 1958999 - CVE-2020-36327 rubygem-bundler: Dependencies of gems with explicit source may be installed from a different source
BZ - 1980126 - CVE-2021-31810 ruby: FTP PASV command response can cause Net::FTP to connect to arbitrary host
BZ - 1980128 - CVE-2021-32066 ruby: StartTLS stripping vulnerability in Net::IMAP
BZ - 1980132 - CVE-2021-31799 rubygem-rdoc: Command injection vulnerability in RDoc
BZ - 2025104 - CVE-2021-41817 ruby: Regular expression denial of service vulnerability of Date parsing methods
BZ - 2026757 - CVE-2021-41819 ruby: Cookie prefix spoofing in CGI::Cookie.parse

CVEs

CVE-2020-36327
CVE-2021-31799
CVE-2021-31810
CVE-2021-32066
CVE-2021-41817
CVE-2021-41819

References

https://access.redhat.com/security/updates/classification/#important
https://access.redhat.com/articles/6206172

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.4

SRPM

ruby-2.6.9-108.module+el8.4.0+14070+b3717926.src.rpm

SHA-256: b4e85b939eb23e61bc8d3fbad987ad6cda0c821e8cad03495d024739cdd69b1e

rubygem-abrt-0.3.0-4.module+el8.1.0+3653+beb38eb0.src.rpm

SHA-256: 3fcbe3bc8c60face0300cf3ed45e4ec21fd6df3071c2ea36d359c3093ebd0dbb

rubygem-bson-4.5.0-1.module+el8.1.0+3653+beb38eb0.src.rpm

SHA-256: 7831b53ebe6e4ce287da95165901c4b0a2459887bb7fd18149df1645576f4434

rubygem-mongo-2.8.0-1.module+el8.1.0+3653+beb38eb0.src.rpm

SHA-256: f3c8d96ecb5e6b2b18e29bdb3cc7be40d9c531556356344b6909c8f325356007

rubygem-mysql2-0.5.2-1.module+el8.1.0+3653+beb38eb0.src.rpm

SHA-256: 0bba0d381e8e6753a2e60a8c436a9d58dc4c14e6c30a40db8d63e704c69eca58

rubygem-pg-1.1.4-1.module+el8.1.0+3653+beb38eb0.src.rpm

SHA-256: 9d91431e97fa54b274f2a9c423e9b1c1ef8a5a879e91405e705017a6d4a07ece

x86_64

ruby-2.6.9-108.module+el8.4.0+14070+b3717926.i686.rpm

SHA-256: 7bdd660fa85c5ab635ab49c380909c701dae9b2925c4a9610c860b34da7cac2f

ruby-2.6.9-108.module+el8.4.0+14070+b3717926.x86_64.rpm

SHA-256: 0fdadbfb642bf0d8ad6b3ebb7606a57c593862de35f0bef192e58507e9d5a411

ruby-debuginfo-2.6.9-108.module+el8.4.0+14070+b3717926.i686.rpm

SHA-256: 4e867ad2b9a15418b8727c3afe703bbb179ea81fd03c25385853b58cc7a50e36

ruby-debuginfo-2.6.9-108.module+el8.4.0+14070+b3717926.x86_64.rpm

SHA-256: 7008147f3179791341e4191025e9813bd711ffa95f1194dd03c5050da763ca7c

ruby-debugsource-2.6.9-108.module+el8.4.0+14070+b3717926.i686.rpm

SHA-256: d535209c9a2246bdc9153a0f869f40b5688b469a5939372db023ffccb79e1aae

ruby-debugsource-2.6.9-108.module+el8.4.0+14070+b3717926.x86_64.rpm

SHA-256: 00be5c1ef3114568e7628c8487f05132841149862c127b1d628a7b338b35f379

ruby-devel-2.6.9-108.module+el8.4.0+14070+b3717926.i686.rpm

SHA-256: 1701ee9ae4944a77c277e8b473c376c68cef6cf32df904656c67b3bd23f308af

ruby-devel-2.6.9-108.module+el8.4.0+14070+b3717926.x86_64.rpm

SHA-256: 1e42b4c90178572a606e999c08c1ac172a9603024da9b5d19c7a2d025b6176ff

ruby-doc-2.6.9-108.module+el8.4.0+14070+b3717926.noarch.rpm

SHA-256: 8f45738263644c9324e973079c5b6802f1eb58275aeb5b8d26641fc90aa7347e

ruby-libs-2.6.9-108.module+el8.4.0+14070+b3717926.i686.rpm

SHA-256: 2b692fd23d1cbaaa94f345eb33fcca7563eb0dd2089b0f2daed7775339783470

ruby-libs-2.6.9-108.module+el8.4.0+14070+b3717926.x86_64.rpm

SHA-256: f5aac5a02af24cd9dd576c60d8e1d034d9d4655ea4977604c1112c09d2583e06

ruby-libs-debuginfo-2.6.9-108.module+el8.4.0+14070+b3717926.i686.rpm

SHA-256: 5221fbaf1d5cd488865184c6b7406b273271b00419989900ac3c38fc7a077c0c

ruby-libs-debuginfo-2.6.9-108.module+el8.4.0+14070+b3717926.x86_64.rpm

SHA-256: be2db3d778597844bf200399cfd6df80be67c6783f1ac11c09a72410cb1456af

rubygem-abrt-0.3.0-4.module+el8.1.0+3653+beb38eb0.noarch.rpm

SHA-256: 837f466df4d8b85f0804081129db4b2f0973a18aa27ccab947c8924b286968ea

rubygem-abrt-doc-0.3.0-4.module+el8.1.0+3653+beb38eb0.noarch.rpm

SHA-256: 2b1eb7462d48e372d5c9d984a784cfd4a5891d4adb5bb5b3e30d5f58348c7dce

rubygem-bigdecimal-1.4.1-108.module+el8.4.0+14070+b3717926.i686.rpm

SHA-256: 9f828f99dd5d897e3f0961acf47516fad8cac3b514cd1454be470227f0c5c740

rubygem-bigdecimal-1.4.1-108.module+el8.4.0+14070+b3717926.x86_64.rpm

SHA-256: 9d1933b47902abdb813e6e65b0154ba8970da7ae625248295cbe62e77e1f3dfe

rubygem-bigdecimal-debuginfo-1.4.1-108.module+el8.4.0+14070+b3717926.i686.rpm

SHA-256: 5e8072982db864ebc6f63ce655cee7b859d43867cd54357bfed23eb337d02b38

rubygem-bigdecimal-debuginfo-1.4.1-108.module+el8.4.0+14070+b3717926.x86_64.rpm

SHA-256: ce1b7e71d79af3547dbd8f08a85f700366e34c2f4aace4d9c6934154601b48ea

rubygem-bson-4.5.0-1.module+el8.1.0+3653+beb38eb0.x86_64.rpm

SHA-256: ea0636c15a386f5bf5784c8bf806965170c5e08cc443925c60f64fc2c62c0732

rubygem-bson-debuginfo-4.5.0-1.module+el8.1.0+3653+beb38eb0.x86_64.rpm

SHA-256: 902fc597202c00887c7fe1c034c3716ba939c37435166ccbdf4931e1dd9f0f15

rubygem-bson-debugsource-4.5.0-1.module+el8.1.0+3653+beb38eb0.x86_64.rpm

SHA-256: 25220b3dc705e37e831a7c03d8d6087671c311d127217792413e23767c86437d

rubygem-bson-doc-4.5.0-1.module+el8.1.0+3653+beb38eb0.noarch.rpm

SHA-256: be62774bd0962078492e843559076e2b9ffa9f1937a148f8e9eb54611a9d1a09

rubygem-bundler-1.17.2-108.module+el8.4.0+14070+b3717926.noarch.rpm

SHA-256: c2793c97676178f4a224018f2cd56532fe0ddc12451d613459fa3e5eb7e349e3

rubygem-did_you_mean-1.3.0-108.module+el8.4.0+14070+b3717926.noarch.rpm

SHA-256: 8edbe91d1b6f7f7f65e64d3310d27e1595e665004eba501ae86de5b9090c1cf2

rubygem-io-console-0.4.7-108.module+el8.4.0+14070+b3717926.i686.rpm

SHA-256: 00136d280f78b7e2a76a6813559d1abd176f9c5f5e57b8334d19e58be932dec9

rubygem-io-console-0.4.7-108.module+el8.4.0+14070+b3717926.x86_64.rpm

SHA-256: 8a43a48f9ea8d1a0b353fcf662430cf3f56721118b4be66fb5a1c1318c872980

rubygem-io-console-debuginfo-0.4.7-108.module+el8.4.0+14070+b3717926.i686.rpm

SHA-256: 6215a91e60b3ba546c003a1658d99d83144c6bcbf3c9ee67cae9b5966e7d7f6f

rubygem-io-console-debuginfo-0.4.7-108.module+el8.4.0+14070+b3717926.x86_64.rpm

SHA-256: b144f156309c9fc01c956eef9d7838e3e8826b60f7d99ab37801e7bae6174281

rubygem-irb-1.0.0-108.module+el8.4.0+14070+b3717926.noarch.rpm

SHA-256: 0bf5f46d74d453f999896d14a2dc6617e721453e1c3139c03ac53ef4f704080d

rubygem-json-2.1.0-108.module+el8.4.0+14070+b3717926.i686.rpm

SHA-256: a1401c51179156eed04cb3806107d76ad478d5a2702949d1798e8894517e3cbf

rubygem-json-2.1.0-108.module+el8.4.0+14070+b3717926.x86_64.rpm

SHA-256: d20febdf2811a6aa0d23875f587f908739d3ef7fb6fef8542154457f4d9b0dad

rubygem-json-debuginfo-2.1.0-108.module+el8.4.0+14070+b3717926.i686.rpm

SHA-256: dcf16f35035e8bee48fd9eab5d16b50db6d7c959c6280b895333b76d90004612

rubygem-json-debuginfo-2.1.0-108.module+el8.4.0+14070+b3717926.x86_64.rpm

SHA-256: 2c71afe3f5f93e890f7986e86ac3d2ae6965dea42f23909802834f5350f38878

rubygem-minitest-5.11.3-108.module+el8.4.0+14070+b3717926.noarch.rpm

SHA-256: 2f4324ca5adf3c8c29065ab527b5966e6448929effa803cf1fd2b5189ced441c

rubygem-mongo-2.8.0-1.module+el8.1.0+3653+beb38eb0.noarch.rpm

SHA-256: 269f82b5979443f6755badefa110bdd33bf5badcfd4d549af37b6b230ca67b0a

rubygem-mongo-doc-2.8.0-1.module+el8.1.0+3653+beb38eb0.noarch.rpm

SHA-256: cfb71d26294990d14c5e4225e3be115c79cf48ad1bde0a66ad2ea7641683c99d

rubygem-mysql2-0.5.2-1.module+el8.1.0+3653+beb38eb0.x86_64.rpm

SHA-256: 82bb6f741c2158503d39ba327a9a18d7c30e845473e7274bdd2056bdca3d10bc

rubygem-mysql2-debuginfo-0.5.2-1.module+el8.1.0+3653+beb38eb0.x86_64.rpm

SHA-256: 0b1ea3f6323b35f2c5c523ac195e7a825546d870afa7f66376173ea94d65ee9a

rubygem-mysql2-debugsource-0.5.2-1.module+el8.1.0+3653+beb38eb0.x86_64.rpm

SHA-256: bde361f51c07a57b238fb376822c67387ccfee85e42d6ae3a9e99cdd9f9c423d

rubygem-mysql2-doc-0.5.2-1.module+el8.1.0+3653+beb38eb0.noarch.rpm

SHA-256: 54ee4063ef55c6534633001cbfdd487989ccc7587b3261b37d4e9e5e48eee6be

rubygem-net-telnet-0.2.0-108.module+el8.4.0+14070+b3717926.noarch.rpm

SHA-256: 53bcc18ba1b3679c8d87fc8a4f37e270a592aef17d4a53ef60783f88d1c5ea52

rubygem-openssl-2.1.2-108.module+el8.4.0+14070+b3717926.i686.rpm

SHA-256: d8ed4d15be36330d5d453ab401074d9b9cf4f91b087bdeba44d3932c2f6b770d

rubygem-openssl-2.1.2-108.module+el8.4.0+14070+b3717926.x86_64.rpm

SHA-256: 9e0106e13984b0c17f41e7e2672fed1330a774a55946e86b84545906fd6de13e

rubygem-openssl-debuginfo-2.1.2-108.module+el8.4.0+14070+b3717926.i686.rpm

SHA-256: 92d0dd4d423e584835a62db6d8bc9d9394fd03454b6804845b2a306eaccb1ddb

rubygem-openssl-debuginfo-2.1.2-108.module+el8.4.0+14070+b3717926.x86_64.rpm

SHA-256: 633ed4edc1176d34be3878ac80d32ea9440fb76010b95c5f0015055604195517

rubygem-pg-1.1.4-1.module+el8.1.0+3653+beb38eb0.x86_64.rpm

SHA-256: a11746a72b4878898766e4710e21227b38832772d587016f4ed7ecef8c05af5b

rubygem-pg-debuginfo-1.1.4-1.module+el8.1.0+3653+beb38eb0.x86_64.rpm

SHA-256: 9a5f97dffa5e296092daa81504369809b8f2b8e03f04521af6d2c103644d00ca

rubygem-pg-debugsource-1.1.4-1.module+el8.1.0+3653+beb38eb0.x86_64.rpm

SHA-256: b82fc0d53798d8d3e62c11effc58985f84ad819e63d101aa99ddf924d9fa55c1

rubygem-pg-doc-1.1.4-1.module+el8.1.0+3653+beb38eb0.noarch.rpm

SHA-256: 2c9e5fad1def2b234b8050271e2dc6e082a71b5ec85299adf09453f078007f18

rubygem-power_assert-1.1.3-108.module+el8.4.0+14070+b3717926.noarch.rpm

SHA-256: 6c1c3fbc360fafa1c1086f31309144ec658cb79a96cdfa08c28aa4807ababd61

rubygem-psych-3.1.0-108.module+el8.4.0+14070+b3717926.i686.rpm

SHA-256: 006e35bf20ff784d680f8852ab213a7d5c01db91fefdb8c6609f2c834ccc4afe

rubygem-psych-3.1.0-108.module+el8.4.0+14070+b3717926.x86_64.rpm

SHA-256: fb652e5b4f777e3a11ed2f189b1f85f561c222d3a53b6b78d0b5d2ee34adb648

rubygem-psych-debuginfo-3.1.0-108.module+el8.4.0+14070+b3717926.i686.rpm

SHA-256: df0a75aae2df9453b79345495a26f6a8bc63369198e14f80e793c35009b3ac7a

rubygem-psych-debuginfo-3.1.0-108.module+el8.4.0+14070+b3717926.x86_64.rpm

SHA-256: 69671507d57011cd6dc5f518f93100aa780cdc9c41683a7236fc1460540aa6b6

rubygem-rake-12.3.3-108.module+el8.4.0+14070+b3717926.noarch.rpm

SHA-256: d49399349a994bb4e20a6ac1dc1ebf8074366142bc063b0c33ae35066145ceb8

rubygem-rdoc-6.1.2.1-108.module+el8.4.0+14070+b3717926.noarch.rpm

SHA-256: a2df49d72abd9f44e6427c95f891a8a3a08837e6c5d62085a6445ab016df1a0c

rubygem-test-unit-3.2.9-108.module+el8.4.0+14070+b3717926.noarch.rpm

SHA-256: ecedea3b1c6c89799ab38805ed319586113ce77c345bffc06e7d688d84a21037

rubygem-xmlrpc-0.3.0-108.module+el8.4.0+14070+b3717926.noarch.rpm

SHA-256: 74f4f9890cf1b2d642424e68e2eb4c877dfb4bb1aafa698940c067151a60bc58

rubygems-3.0.3.1-108.module+el8.4.0+14070+b3717926.noarch.rpm

SHA-256: b912af0daeb7a059e079665cab6d6fce7acb85018f9f2561623a852ae7676133

rubygems-devel-3.0.3.1-108.module+el8.4.0+14070+b3717926.noarch.rpm

SHA-256: 43c09911618be8161d576fd9fa646b1370ef647fdf9f7749677f0910b5090f2a

Red Hat Enterprise Linux Server - AUS 8.4