Moderate: ruby:2.5 security update

2022-08-0100:00:00

errata.almalinux.org

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.004 Low

EPSS

Percentile

73.0%

JSON

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.
Security Fix(es):

ruby: Regular expression denial of service vulnerability of Date parsing methods (CVE-2021-41817)
ruby: Cookie prefix spoofing in CGI::Cookie.parse (CVE-2021-41819)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
almalinux8noarchrubygem-net-telnet< 0.1.1-110.module_el8.6.0+3074+4b08f9d4rubygem-net-telnet-0.1.1-110.module_el8.6.0+3074+4b08f9d4.noarch.rpm
almalinux8noarchrubygem-did_you_mean< 1.2.0-110.module_el8.6.0+3074+4b08f9d4rubygem-did_you_mean-1.2.0-110.module_el8.6.0+3074+4b08f9d4.noarch.rpm
almalinux8noarchrubygem-power_assert< 1.1.1-110.module_el8.6.0+3074+4b08f9d4rubygem-power_assert-1.1.1-110.module_el8.6.0+3074+4b08f9d4.noarch.rpm
almalinux8noarchrubygems< 2.7.6.3-110.module_el8.6.0+3074+4b08f9d4rubygems-2.7.6.3-110.module_el8.6.0+3074+4b08f9d4.noarch.rpm
almalinux8noarchruby-doc< 2.5.9-110.module_el8.6.0+3074+4b08f9d4ruby-doc-2.5.9-110.module_el8.6.0+3074+4b08f9d4.noarch.rpm
almalinux8i686ruby< 2.5.9-110.module_el8.6.0+3074+4b08f9d4ruby-2.5.9-110.module_el8.6.0+3074+4b08f9d4.i686.rpm
almalinux8i686ruby-devel< 2.5.9-110.module_el8.6.0+3074+4b08f9d4ruby-devel-2.5.9-110.module_el8.6.0+3074+4b08f9d4.i686.rpm
almalinux8i686rubygem-openssl< 2.1.2-110.module_el8.6.0+3074+4b08f9d4rubygem-openssl-2.1.2-110.module_el8.6.0+3074+4b08f9d4.i686.rpm
almalinux8noarchrubygem-abrt< 0.3.0-4.module_el8.5.0+2625+ec418553rubygem-abrt-0.3.0-4.module_el8.5.0+2625+ec418553.noarch.rpm
almalinux8noarchrubygem-rdoc< 6.0.1.1-110.module_el8.6.0+3074+4b08f9d4rubygem-rdoc-6.0.1.1-110.module_el8.6.0+3074+4b08f9d4.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	8	noarch	rubygem-net-telnet	< 0.1.1-110.module_el8.6.0+3074+4b08f9d4	rubygem-net-telnet-0.1.1-110.module_el8.6.0+3074+4b08f9d4.noarch.rpm
almalinux	8	noarch	rubygem-did_you_mean	< 1.2.0-110.module_el8.6.0+3074+4b08f9d4	rubygem-did_you_mean-1.2.0-110.module_el8.6.0+3074+4b08f9d4.noarch.rpm
almalinux	8	noarch	rubygem-power_assert	< 1.1.1-110.module_el8.6.0+3074+4b08f9d4	rubygem-power_assert-1.1.1-110.module_el8.6.0+3074+4b08f9d4.noarch.rpm
almalinux	8	noarch	rubygems	< 2.7.6.3-110.module_el8.6.0+3074+4b08f9d4	rubygems-2.7.6.3-110.module_el8.6.0+3074+4b08f9d4.noarch.rpm
almalinux	8	noarch	ruby-doc	< 2.5.9-110.module_el8.6.0+3074+4b08f9d4	ruby-doc-2.5.9-110.module_el8.6.0+3074+4b08f9d4.noarch.rpm
almalinux	8	i686	ruby	< 2.5.9-110.module_el8.6.0+3074+4b08f9d4	ruby-2.5.9-110.module_el8.6.0+3074+4b08f9d4.i686.rpm
almalinux	8	i686	ruby-devel	< 2.5.9-110.module_el8.6.0+3074+4b08f9d4	ruby-devel-2.5.9-110.module_el8.6.0+3074+4b08f9d4.i686.rpm
almalinux	8	i686	rubygem-openssl	< 2.1.2-110.module_el8.6.0+3074+4b08f9d4	rubygem-openssl-2.1.2-110.module_el8.6.0+3074+4b08f9d4.i686.rpm
almalinux	8	noarch	rubygem-abrt	< 0.3.0-4.module_el8.5.0+2625+ec418553	rubygem-abrt-0.3.0-4.module_el8.5.0+2625+ec418553.noarch.rpm
almalinux	8	noarch	rubygem-rdoc	< 6.0.1.1-110.module_el8.6.0+3074+4b08f9d4	rubygem-rdoc-6.0.1.1-110.module_el8.6.0+3074+4b08f9d4.noarch.rpm