Moderate: ruby:2.7 security, bug fix, and enhancement update

2023-06-2700:00:00

errata.almalinux.org

0.003 Low

EPSS

Percentile

71.2%

JSON

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

The following packages have been upgraded to a later upstream version: ruby (2.7). (BZ#2189465)

Security Fix(es):

ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)
ruby: ReDoS vulnerability in URI (CVE-2023-28755)
ruby: ReDoS vulnerability in Time (CVE-2023-28756)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
almalinux8noarchrubygem-test-unit< 3.3.4-139.module_el8.8.0+3578+2b4b06darubygem-test-unit-3.3.4-139.module_el8.8.0+3578+2b4b06da.noarch.rpm
almalinux8i686ruby-devel< 2.7.8-139.module_el8.8.0+3578+2b4b06daruby-devel-2.7.8-139.module_el8.8.0+3578+2b4b06da.i686.rpm
almalinux8noarchrubygem-bundler< 2.2.24-139.module_el8.8.0+3578+2b4b06darubygem-bundler-2.2.24-139.module_el8.8.0+3578+2b4b06da.noarch.rpm
almalinux8noarchrubygem-rdoc< 6.2.1.1-139.module_el8.8.0+3578+2b4b06darubygem-rdoc-6.2.1.1-139.module_el8.8.0+3578+2b4b06da.noarch.rpm
almalinux8noarchrubygem-power_assert< 1.1.7-139.module_el8.8.0+3578+2b4b06darubygem-power_assert-1.1.7-139.module_el8.8.0+3578+2b4b06da.noarch.rpm
almalinux8i686ruby< 2.7.8-139.module_el8.8.0+3578+2b4b06daruby-2.7.8-139.module_el8.8.0+3578+2b4b06da.i686.rpm
almalinux8noarchrubygem-mongo< 2.11.3-1.module_el8.3.0+6147+d0dfc1e4rubygem-mongo-2.11.3-1.module_el8.3.0+6147+d0dfc1e4.noarch.rpm
almalinux8noarchrubygem-mongo-doc< 2.11.3-1.module_el8.3.0+6147+d0dfc1e4rubygem-mongo-doc-2.11.3-1.module_el8.3.0+6147+d0dfc1e4.noarch.rpm
almalinux8noarchrubygem-net-telnet< 0.2.0-139.module_el8.8.0+3578+2b4b06darubygem-net-telnet-0.2.0-139.module_el8.8.0+3578+2b4b06da.noarch.rpm
almalinux8i686rubygem-json< 2.3.0-139.module_el8.8.0+3578+2b4b06darubygem-json-2.3.0-139.module_el8.8.0+3578+2b4b06da.i686.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	8	noarch	rubygem-test-unit	< 3.3.4-139.module_el8.8.0+3578+2b4b06da	rubygem-test-unit-3.3.4-139.module_el8.8.0+3578+2b4b06da.noarch.rpm
almalinux	8	i686	ruby-devel	< 2.7.8-139.module_el8.8.0+3578+2b4b06da	ruby-devel-2.7.8-139.module_el8.8.0+3578+2b4b06da.i686.rpm
almalinux	8	noarch	rubygem-bundler	< 2.2.24-139.module_el8.8.0+3578+2b4b06da	rubygem-bundler-2.2.24-139.module_el8.8.0+3578+2b4b06da.noarch.rpm
almalinux	8	noarch	rubygem-rdoc	< 6.2.1.1-139.module_el8.8.0+3578+2b4b06da	rubygem-rdoc-6.2.1.1-139.module_el8.8.0+3578+2b4b06da.noarch.rpm
almalinux	8	noarch	rubygem-power_assert	< 1.1.7-139.module_el8.8.0+3578+2b4b06da	rubygem-power_assert-1.1.7-139.module_el8.8.0+3578+2b4b06da.noarch.rpm
almalinux	8	i686	ruby	< 2.7.8-139.module_el8.8.0+3578+2b4b06da	ruby-2.7.8-139.module_el8.8.0+3578+2b4b06da.i686.rpm
almalinux	8	noarch	rubygem-mongo	< 2.11.3-1.module_el8.3.0+6147+d0dfc1e4	rubygem-mongo-2.11.3-1.module_el8.3.0+6147+d0dfc1e4.noarch.rpm
almalinux	8	noarch	rubygem-mongo-doc	< 2.11.3-1.module_el8.3.0+6147+d0dfc1e4	rubygem-mongo-doc-2.11.3-1.module_el8.3.0+6147+d0dfc1e4.noarch.rpm
almalinux	8	noarch	rubygem-net-telnet	< 0.2.0-139.module_el8.8.0+3578+2b4b06da	rubygem-net-telnet-0.2.0-139.module_el8.8.0+3578+2b4b06da.noarch.rpm
almalinux	8	i686	rubygem-json	< 2.3.0-139.module_el8.8.0+3578+2b4b06da	rubygem-json-2.3.0-139.module_el8.8.0+3578+2b4b06da.i686.rpm