Lucene search

AlmaLinuxALSA-2023:7025

HistoryNov 14, 2023 - 12:00 a.m.

Moderate: ruby:2.5 security update

2023-11-1400:00:00

errata.almalinux.org

ruby 2.5

security update

http response splitting

buffer overrun

redos vulnerability

cve-2021-33621

cve-2022-28739

cve-2023-28755

cve-2023-28756

almalinux

release notes.

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

6.7 Medium

AI Score

Confidence

High

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

73.0%

JSON

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)
ruby: Buffer overrun in String-to-Float conversion (CVE-2022-28739)
ruby: ReDoS vulnerability in URI (CVE-2023-28755)
ruby: ReDoS vulnerability in Time (CVE-2023-28756)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
almalinux8i686rubygem-openssl< 2.1.2-111.module_el8.9.0+3635+c6f99506rubygem-openssl-2.1.2-111.module_el8.9.0+3635+c6f99506.i686.rpm
almalinux8i686rubygem-io-console< 0.4.6-111.module_el8.9.0+3635+c6f99506rubygem-io-console-0.4.6-111.module_el8.9.0+3635+c6f99506.i686.rpm
almalinux8noarchrubygem-abrt< 0.3.0-4.module_el8.5.0+2625+ec418553rubygem-abrt-0.3.0-4.module_el8.5.0+2625+ec418553.noarch.rpm
almalinux8noarchrubygem-test-unit< 3.2.7-111.module_el8.9.0+3635+c6f99506rubygem-test-unit-3.2.7-111.module_el8.9.0+3635+c6f99506.noarch.rpm
almalinux8i686ruby-devel< 2.5.9-111.module_el8.9.0+3635+c6f99506ruby-devel-2.5.9-111.module_el8.9.0+3635+c6f99506.i686.rpm
almalinux8i686rubygem-json< 2.1.0-111.module_el8.9.0+3635+c6f99506rubygem-json-2.1.0-111.module_el8.9.0+3635+c6f99506.i686.rpm
almalinux8i686ruby< 2.5.9-111.module_el8.9.0+3635+c6f99506ruby-2.5.9-111.module_el8.9.0+3635+c6f99506.i686.rpm
almalinux8i686rubygem-psych< 3.0.2-111.module_el8.9.0+3635+c6f99506rubygem-psych-3.0.2-111.module_el8.9.0+3635+c6f99506.i686.rpm
almalinux8noarchrubygem-xmlrpc< 0.3.0-111.module_el8.9.0+3635+c6f99506rubygem-xmlrpc-0.3.0-111.module_el8.9.0+3635+c6f99506.noarch.rpm
almalinux8noarchrubygem-rdoc< 6.0.1.1-111.module_el8.9.0+3635+c6f99506rubygem-rdoc-6.0.1.1-111.module_el8.9.0+3635+c6f99506.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	8	i686	rubygem-openssl	< 2.1.2-111.module_el8.9.0+3635+c6f99506	rubygem-openssl-2.1.2-111.module_el8.9.0+3635+c6f99506.i686.rpm
almalinux	8	i686	rubygem-io-console	< 0.4.6-111.module_el8.9.0+3635+c6f99506	rubygem-io-console-0.4.6-111.module_el8.9.0+3635+c6f99506.i686.rpm
almalinux	8	noarch	rubygem-abrt	< 0.3.0-4.module_el8.5.0+2625+ec418553	rubygem-abrt-0.3.0-4.module_el8.5.0+2625+ec418553.noarch.rpm
almalinux	8	noarch	rubygem-test-unit	< 3.2.7-111.module_el8.9.0+3635+c6f99506	rubygem-test-unit-3.2.7-111.module_el8.9.0+3635+c6f99506.noarch.rpm
almalinux	8	i686	ruby-devel	< 2.5.9-111.module_el8.9.0+3635+c6f99506	ruby-devel-2.5.9-111.module_el8.9.0+3635+c6f99506.i686.rpm
almalinux	8	i686	rubygem-json	< 2.1.0-111.module_el8.9.0+3635+c6f99506	rubygem-json-2.1.0-111.module_el8.9.0+3635+c6f99506.i686.rpm
almalinux	8	i686	ruby	< 2.5.9-111.module_el8.9.0+3635+c6f99506	ruby-2.5.9-111.module_el8.9.0+3635+c6f99506.i686.rpm
almalinux	8	i686	rubygem-psych	< 3.0.2-111.module_el8.9.0+3635+c6f99506	rubygem-psych-3.0.2-111.module_el8.9.0+3635+c6f99506.i686.rpm
almalinux	8	noarch	rubygem-xmlrpc	< 0.3.0-111.module_el8.9.0+3635+c6f99506	rubygem-xmlrpc-0.3.0-111.module_el8.9.0+3635+c6f99506.noarch.rpm
almalinux	8	noarch	rubygem-rdoc	< 6.0.1.1-111.module_el8.9.0+3635+c6f99506	rubygem-rdoc-6.0.1.1-111.module_el8.9.0+3635+c6f99506.noarch.rpm