Moderate: ruby:2.5 security update

2022-02-2400:00:00

errata.almalinux.org

7.4 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.007 Low

EPSS

Percentile

80.1%

JSON

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.
Security Fix(es):

rubygem-rdoc: Command injection vulnerability in RDoc (CVE-2021-31799)
ruby: FTP PASV command response can cause Net::FTP to connect to arbitrary host (CVE-2021-31810)
ruby: StartTLS stripping vulnerability in Net::IMAP (CVE-2021-32066)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
almalinux8i686rubygem-bigdecimal< 1.3.4-109.module_el8.5.0+2627+d9c243carubygem-bigdecimal-1.3.4-109.module_el8.5.0+2627+d9c243ca.i686.rpm
almalinux8i686rubygem-psych< 3.0.2-109.module_el8.5.0+2627+d9c243carubygem-psych-3.0.2-109.module_el8.5.0+2627+d9c243ca.i686.rpm
almalinux8i686rubygem-json< 2.1.0-109.module_el8.5.0+2627+d9c243carubygem-json-2.1.0-109.module_el8.5.0+2627+d9c243ca.i686.rpm
almalinux8i686rubygem-openssl< 2.1.2-109.module_el8.5.0+2627+d9c243carubygem-openssl-2.1.2-109.module_el8.5.0+2627+d9c243ca.i686.rpm
almalinux8noarchrubygem-abrt< 0.3.0-4.module_el8.5.0+2625+ec418553rubygem-abrt-0.3.0-4.module_el8.5.0+2625+ec418553.noarch.rpm
almalinux8noarchruby-doc< 2.5.9-109.module_el8.5.0+2627+d9c243caruby-doc-2.5.9-109.module_el8.5.0+2627+d9c243ca.noarch.rpm
almalinux8noarchrubygem-test-unit< 3.2.7-109.module_el8.5.0+2627+d9c243carubygem-test-unit-3.2.7-109.module_el8.5.0+2627+d9c243ca.noarch.rpm
almalinux8i686ruby-libs< 2.5.9-109.module_el8.5.0+2627+d9c243caruby-libs-2.5.9-109.module_el8.5.0+2627+d9c243ca.i686.rpm
almalinux8noarchrubygem-rake< 12.3.3-109.module_el8.5.0+2627+d9c243carubygem-rake-12.3.3-109.module_el8.5.0+2627+d9c243ca.noarch.rpm
almalinux8noarchrubygems-devel< 2.7.6.3-109.module_el8.5.0+2627+d9c243carubygems-devel-2.7.6.3-109.module_el8.5.0+2627+d9c243ca.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	8	i686	rubygem-bigdecimal	< 1.3.4-109.module_el8.5.0+2627+d9c243ca	rubygem-bigdecimal-1.3.4-109.module_el8.5.0+2627+d9c243ca.i686.rpm
almalinux	8	i686	rubygem-psych	< 3.0.2-109.module_el8.5.0+2627+d9c243ca	rubygem-psych-3.0.2-109.module_el8.5.0+2627+d9c243ca.i686.rpm
almalinux	8	i686	rubygem-json	< 2.1.0-109.module_el8.5.0+2627+d9c243ca	rubygem-json-2.1.0-109.module_el8.5.0+2627+d9c243ca.i686.rpm
almalinux	8	i686	rubygem-openssl	< 2.1.2-109.module_el8.5.0+2627+d9c243ca	rubygem-openssl-2.1.2-109.module_el8.5.0+2627+d9c243ca.i686.rpm
almalinux	8	noarch	rubygem-abrt	< 0.3.0-4.module_el8.5.0+2625+ec418553	rubygem-abrt-0.3.0-4.module_el8.5.0+2625+ec418553.noarch.rpm
almalinux	8	noarch	ruby-doc	< 2.5.9-109.module_el8.5.0+2627+d9c243ca	ruby-doc-2.5.9-109.module_el8.5.0+2627+d9c243ca.noarch.rpm
almalinux	8	noarch	rubygem-test-unit	< 3.2.7-109.module_el8.5.0+2627+d9c243ca	rubygem-test-unit-3.2.7-109.module_el8.5.0+2627+d9c243ca.noarch.rpm
almalinux	8	i686	ruby-libs	< 2.5.9-109.module_el8.5.0+2627+d9c243ca	ruby-libs-2.5.9-109.module_el8.5.0+2627+d9c243ca.i686.rpm
almalinux	8	noarch	rubygem-rake	< 12.3.3-109.module_el8.5.0+2627+d9c243ca	rubygem-rake-12.3.3-109.module_el8.5.0+2627+d9c243ca.noarch.rpm
almalinux	8	noarch	rubygems-devel	< 2.7.6.3-109.module_el8.5.0+2627+d9c243ca	rubygems-devel-2.7.6.3-109.module_el8.5.0+2627+d9c243ca.noarch.rpm