[ALSA-2024:3500] ruby:3.0 security update

Severity Moderate

Affected Packages 44

CVEs 6

ruby:3.0 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)
ruby: ReDoS vulnerability in URI (CVE-2023-28755)
ruby: ReDoS vulnerability in Time (CVE-2023-28756)
ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)
ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)
ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Package	Affected Version
pkg:rpm/almalinux/rubygems?arch=noarch&distro=almalinux-8.1	< 3.2.33-143.module_el8.10.0+3852+ce828b19
pkg:rpm/almalinux/rubygems-devel?arch=noarch&distro=almalinux-8.1	< 3.2.33-143.module_el8.10.0+3852+ce828b19
pkg:rpm/almalinux/rubygem-typeprof?arch=noarch&distro=almalinux-8.1	< 0.15.2-143.module_el8.10.0+3852+ce828b19
pkg:rpm/almalinux/rubygem-test-unit?arch=noarch&distro=almalinux-8.1	< 3.3.7-143.module_el8.10.0+3852+ce828b19
pkg:rpm/almalinux/rubygem-rss?arch=noarch&distro=almalinux-8.1	< 0.2.9-143.module_el8.10.0+3852+ce828b19
pkg:rpm/almalinux/rubygem-rexml?arch=noarch&distro=almalinux-8.1	< 3.2.5-143.module_el8.10.0+3852+ce828b19
pkg:rpm/almalinux/rubygem-rdoc?arch=noarch&distro=almalinux-8.1	< 6.3.4.1-143.module_el8.10.0+3852+ce828b19
pkg:rpm/almalinux/rubygem-rbs?arch=noarch&distro=almalinux-8.1	< 1.4.0-143.module_el8.10.0+3852+ce828b19
pkg:rpm/almalinux/rubygem-rake?arch=noarch&distro=almalinux-8.1	< 13.0.3-143.module_el8.10.0+3852+ce828b19
pkg:rpm/almalinux/rubygem-psych?arch=x86_64&distro=almalinux-8.1	< 3.3.2-143.module_el8.10.0+3852+ce828b19
pkg:rpm/almalinux/rubygem-psych?arch=i686&distro=almalinux-8.1	< 3.3.2-143.module_el8.10.0+3852+ce828b19
pkg:rpm/almalinux/rubygem-psych?arch=aarch64&distro=almalinux-8.1	< 3.3.2-143.module_el8.10.0+3852+ce828b19
pkg:rpm/almalinux/rubygem-power_assert?arch=noarch&distro=almalinux-8.1	< 1.2.1-143.module_el8.10.0+3852+ce828b19
pkg:rpm/almalinux/rubygem-pg?arch=x86_64&distro=almalinux-8.5	< 1.2.3-1.module_el8.5.0+2595+0c654ebc
pkg:rpm/almalinux/rubygem-pg?arch=aarch64&distro=almalinux-8.5	< 1.2.3-1.module_el8.5.0+2595+0c654ebc
pkg:rpm/almalinux/rubygem-pg-doc?arch=noarch&distro=almalinux-8.5	< 1.2.3-1.module_el8.5.0+2595+0c654ebc
pkg:rpm/almalinux/rubygem-mysql2?arch=x86_64&distro=almalinux-8.1	< 0.5.3-2.module_el8.10.0+3852+ce828b19
pkg:rpm/almalinux/rubygem-mysql2?arch=aarch64&distro=almalinux-8.1	< 0.5.3-2.module_el8.10.0+3852+ce828b19
pkg:rpm/almalinux/rubygem-mysql2-doc?arch=noarch&distro=almalinux-8.1	< 0.5.3-2.module_el8.10.0+3852+ce828b19
pkg:rpm/almalinux/rubygem-minitest?arch=noarch&distro=almalinux-8.1	< 5.14.2-143.module_el8.10.0+3852+ce828b19
pkg:rpm/almalinux/rubygem-json?arch=x86_64&distro=almalinux-8.1	< 2.5.1-143.module_el8.10.0+3852+ce828b19
pkg:rpm/almalinux/rubygem-json?arch=i686&distro=almalinux-8.1	< 2.5.1-143.module_el8.10.0+3852+ce828b19
pkg:rpm/almalinux/rubygem-json?arch=aarch64&distro=almalinux-8.1	< 2.5.1-143.module_el8.10.0+3852+ce828b19
pkg:rpm/almalinux/rubygem-irb?arch=noarch&distro=almalinux-8.1	< 1.3.5-143.module_el8.10.0+3852+ce828b19
pkg:rpm/almalinux/rubygem-io-console?arch=x86_64&distro=almalinux-8.1	< 0.5.7-143.module_el8.10.0+3852+ce828b19
pkg:rpm/almalinux/rubygem-io-console?arch=i686&distro=almalinux-8.1	< 0.5.7-143.module_el8.10.0+3852+ce828b19
pkg:rpm/almalinux/rubygem-io-console?arch=aarch64&distro=almalinux-8.1	< 0.5.7-143.module_el8.10.0+3852+ce828b19
pkg:rpm/almalinux/rubygem-bundler?arch=noarch&distro=almalinux-8.1	< 2.2.33-143.module_el8.10.0+3852+ce828b19
pkg:rpm/almalinux/rubygem-bigdecimal?arch=x86_64&distro=almalinux-8.1	< 3.0.0-143.module_el8.10.0+3852+ce828b19
pkg:rpm/almalinux/rubygem-bigdecimal?arch=i686&distro=almalinux-8.1	< 3.0.0-143.module_el8.10.0+3852+ce828b19
pkg:rpm/almalinux/rubygem-bigdecimal?arch=aarch64&distro=almalinux-8.1	< 3.0.0-143.module_el8.10.0+3852+ce828b19
pkg:rpm/almalinux/rubygem-abrt?arch=noarch&distro=almalinux-8.1	< 0.4.0-1.module_el8.10.0+3852+ce828b19
pkg:rpm/almalinux/rubygem-abrt-doc?arch=noarch&distro=almalinux-8.1	< 0.4.0-1.module_el8.10.0+3852+ce828b19
pkg:rpm/almalinux/ruby?arch=x86_64&distro=almalinux-8.1	< 3.0.7-143.module_el8.10.0+3852+ce828b19
pkg:rpm/almalinux/ruby?arch=i686&distro=almalinux-8.1	< 3.0.7-143.module_el8.10.0+3852+ce828b19
pkg:rpm/almalinux/ruby?arch=aarch64&distro=almalinux-8.1	< 3.0.7-143.module_el8.10.0+3852+ce828b19
pkg:rpm/almalinux/ruby-libs?arch=x86_64&distro=almalinux-8.1	< 3.0.7-143.module_el8.10.0+3852+ce828b19
pkg:rpm/almalinux/ruby-libs?arch=i686&distro=almalinux-8.1	< 3.0.7-143.module_el8.10.0+3852+ce828b19
pkg:rpm/almalinux/ruby-libs?arch=aarch64&distro=almalinux-8.1	< 3.0.7-143.module_el8.10.0+3852+ce828b19
pkg:rpm/almalinux/ruby-doc?arch=noarch&distro=almalinux-8.1	< 3.0.7-143.module_el8.10.0+3852+ce828b19
pkg:rpm/almalinux/ruby-devel?arch=x86_64&distro=almalinux-8.1	< 3.0.7-143.module_el8.10.0+3852+ce828b19
pkg:rpm/almalinux/ruby-devel?arch=i686&distro=almalinux-8.1	< 3.0.7-143.module_el8.10.0+3852+ce828b19
pkg:rpm/almalinux/ruby-devel?arch=aarch64&distro=almalinux-8.1	< 3.0.7-143.module_el8.10.0+3852+ce828b19
pkg:rpm/almalinux/ruby-default-gems?arch=noarch&distro=almalinux-8.1	< 3.0.7-143.module_el8.10.0+3852+ce828b19

ID

ALSA-2024:3500

Severity

moderate

URL

https://errata.almalinux.org/ALSA-2024:3500.html

Published

2024-05-30T00:00:00
(3 months ago)

Modified

2024-05-31T14:51:49
(3 months ago)

Rights

Other Advisories

Source	# ID	URL
RHSA	RHSA-2024:3500	https://access.redhat.com/errata/RHSA-2024:3500
CVE	CVE-2021-33621	https://access.redhat.com/security/cve/CVE-2021-33621
CVE	CVE-2023-28755	https://access.redhat.com/security/cve/CVE-2023-28755
CVE	CVE-2023-28756	https://access.redhat.com/security/cve/CVE-2023-28756
CVE	CVE-2024-27280	https://access.redhat.com/security/cve/CVE-2024-27280
CVE	CVE-2024-27281	https://access.redhat.com/security/cve/CVE-2024-27281
CVE	CVE-2024-27282	https://access.redhat.com/security/cve/CVE-2024-27282
Bugzilla	2149706	https://bugzilla.redhat.com/2149706
Bugzilla	2184059	https://bugzilla.redhat.com/2184059
Bugzilla	2184061	https://bugzilla.redhat.com/2184061
Bugzilla	2270749	https://bugzilla.redhat.com/2270749
Bugzilla	2270750	https://bugzilla.redhat.com/2270750
Bugzilla	2276810	https://bugzilla.redhat.com/2276810
Self	ALSA-2024:3500	https://errata.almalinux.org/8/ALSA-2024-3500.html

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform	Arch
Affected	pkg:rpm/almalinux/rubygems?arch=noarch&distro=almalinux-8.1	almalinux	rubygems	< 3.2.33-143.module_el8.10.0+3852+ce828b19	almalinux-8.1	noarch
Affected	pkg:rpm/almalinux/rubygems-devel?arch=noarch&distro=almalinux-8.1	almalinux	rubygems-devel	< 3.2.33-143.module_el8.10.0+3852+ce828b19	almalinux-8.1	noarch
Affected	pkg:rpm/almalinux/rubygem-typeprof?arch=noarch&distro=almalinux-8.1	almalinux	rubygem-typeprof	< 0.15.2-143.module_el8.10.0+3852+ce828b19	almalinux-8.1	noarch
Affected	pkg:rpm/almalinux/rubygem-test-unit?arch=noarch&distro=almalinux-8.1	almalinux	rubygem-test-unit	< 3.3.7-143.module_el8.10.0+3852+ce828b19	almalinux-8.1	noarch
Affected	pkg:rpm/almalinux/rubygem-rss?arch=noarch&distro=almalinux-8.1	almalinux	rubygem-rss	< 0.2.9-143.module_el8.10.0+3852+ce828b19	almalinux-8.1	noarch
Affected	pkg:rpm/almalinux/rubygem-rexml?arch=noarch&distro=almalinux-8.1	almalinux	rubygem-rexml	< 3.2.5-143.module_el8.10.0+3852+ce828b19	almalinux-8.1	noarch
Affected	pkg:rpm/almalinux/rubygem-rdoc?arch=noarch&distro=almalinux-8.1	almalinux	rubygem-rdoc	< 6.3.4.1-143.module_el8.10.0+3852+ce828b19	almalinux-8.1	noarch
Affected	pkg:rpm/almalinux/rubygem-rbs?arch=noarch&distro=almalinux-8.1	almalinux	rubygem-rbs	< 1.4.0-143.module_el8.10.0+3852+ce828b19	almalinux-8.1	noarch
Affected	pkg:rpm/almalinux/rubygem-rake?arch=noarch&distro=almalinux-8.1	almalinux	rubygem-rake	< 13.0.3-143.module_el8.10.0+3852+ce828b19	almalinux-8.1	noarch
Affected	pkg:rpm/almalinux/rubygem-psych?arch=x86_64&distro=almalinux-8.1	almalinux	rubygem-psych	< 3.3.2-143.module_el8.10.0+3852+ce828b19	almalinux-8.1	x86_64
Affected	pkg:rpm/almalinux/rubygem-psych?arch=i686&distro=almalinux-8.1	almalinux	rubygem-psych	< 3.3.2-143.module_el8.10.0+3852+ce828b19	almalinux-8.1	i686
Affected	pkg:rpm/almalinux/rubygem-psych?arch=aarch64&distro=almalinux-8.1	almalinux	rubygem-psych	< 3.3.2-143.module_el8.10.0+3852+ce828b19	almalinux-8.1	aarch64
Affected	pkg:rpm/almalinux/rubygem-power_assert?arch=noarch&distro=almalinux-8.1	almalinux	rubygem-power_assert	< 1.2.1-143.module_el8.10.0+3852+ce828b19	almalinux-8.1	noarch
Affected	pkg:rpm/almalinux/rubygem-pg?arch=x86_64&distro=almalinux-8.5	almalinux	rubygem-pg	< 1.2.3-1.module_el8.5.0+2595+0c654ebc	almalinux-8.5	x86_64
Affected	pkg:rpm/almalinux/rubygem-pg?arch=aarch64&distro=almalinux-8.5	almalinux	rubygem-pg	< 1.2.3-1.module_el8.5.0+2595+0c654ebc	almalinux-8.5	aarch64
Affected	pkg:rpm/almalinux/rubygem-pg-doc?arch=noarch&distro=almalinux-8.5	almalinux	rubygem-pg-doc	< 1.2.3-1.module_el8.5.0+2595+0c654ebc	almalinux-8.5	noarch
Affected	pkg:rpm/almalinux/rubygem-mysql2?arch=x86_64&distro=almalinux-8.1	almalinux	rubygem-mysql2	< 0.5.3-2.module_el8.10.0+3852+ce828b19	almalinux-8.1	x86_64
Affected	pkg:rpm/almalinux/rubygem-mysql2?arch=aarch64&distro=almalinux-8.1	almalinux	rubygem-mysql2	< 0.5.3-2.module_el8.10.0+3852+ce828b19	almalinux-8.1	aarch64
Affected	pkg:rpm/almalinux/rubygem-mysql2-doc?arch=noarch&distro=almalinux-8.1	almalinux	rubygem-mysql2-doc	< 0.5.3-2.module_el8.10.0+3852+ce828b19	almalinux-8.1	noarch
Affected	pkg:rpm/almalinux/rubygem-minitest?arch=noarch&distro=almalinux-8.1	almalinux	rubygem-minitest	< 5.14.2-143.module_el8.10.0+3852+ce828b19	almalinux-8.1	noarch
Affected	pkg:rpm/almalinux/rubygem-json?arch=x86_64&distro=almalinux-8.1	almalinux	rubygem-json	< 2.5.1-143.module_el8.10.0+3852+ce828b19	almalinux-8.1	x86_64
Affected	pkg:rpm/almalinux/rubygem-json?arch=i686&distro=almalinux-8.1	almalinux	rubygem-json	< 2.5.1-143.module_el8.10.0+3852+ce828b19	almalinux-8.1	i686
Affected	pkg:rpm/almalinux/rubygem-json?arch=aarch64&distro=almalinux-8.1	almalinux	rubygem-json	< 2.5.1-143.module_el8.10.0+3852+ce828b19	almalinux-8.1	aarch64
Affected	pkg:rpm/almalinux/rubygem-irb?arch=noarch&distro=almalinux-8.1	almalinux	rubygem-irb	< 1.3.5-143.module_el8.10.0+3852+ce828b19	almalinux-8.1	noarch
Affected	pkg:rpm/almalinux/rubygem-io-console?arch=x86_64&distro=almalinux-8.1	almalinux	rubygem-io-console	< 0.5.7-143.module_el8.10.0+3852+ce828b19	almalinux-8.1	x86_64
Affected	pkg:rpm/almalinux/rubygem-io-console?arch=i686&distro=almalinux-8.1	almalinux	rubygem-io-console	< 0.5.7-143.module_el8.10.0+3852+ce828b19	almalinux-8.1	i686
Affected	pkg:rpm/almalinux/rubygem-io-console?arch=aarch64&distro=almalinux-8.1	almalinux	rubygem-io-console	< 0.5.7-143.module_el8.10.0+3852+ce828b19	almalinux-8.1	aarch64
Affected	pkg:rpm/almalinux/rubygem-bundler?arch=noarch&distro=almalinux-8.1	almalinux	rubygem-bundler	< 2.2.33-143.module_el8.10.0+3852+ce828b19	almalinux-8.1	noarch
Affected	pkg:rpm/almalinux/rubygem-bigdecimal?arch=x86_64&distro=almalinux-8.1	almalinux	rubygem-bigdecimal	< 3.0.0-143.module_el8.10.0+3852+ce828b19	almalinux-8.1	x86_64
Affected	pkg:rpm/almalinux/rubygem-bigdecimal?arch=i686&distro=almalinux-8.1	almalinux	rubygem-bigdecimal	< 3.0.0-143.module_el8.10.0+3852+ce828b19	almalinux-8.1	i686
Affected	pkg:rpm/almalinux/rubygem-bigdecimal?arch=aarch64&distro=almalinux-8.1	almalinux	rubygem-bigdecimal	< 3.0.0-143.module_el8.10.0+3852+ce828b19	almalinux-8.1	aarch64
Affected	pkg:rpm/almalinux/rubygem-abrt?arch=noarch&distro=almalinux-8.1	almalinux	rubygem-abrt	< 0.4.0-1.module_el8.10.0+3852+ce828b19	almalinux-8.1	noarch
Affected	pkg:rpm/almalinux/rubygem-abrt-doc?arch=noarch&distro=almalinux-8.1	almalinux	rubygem-abrt-doc	< 0.4.0-1.module_el8.10.0+3852+ce828b19	almalinux-8.1	noarch
Affected	pkg:rpm/almalinux/ruby?arch=x86_64&distro=almalinux-8.1	almalinux	ruby	< 3.0.7-143.module_el8.10.0+3852+ce828b19	almalinux-8.1	x86_64
Affected	pkg:rpm/almalinux/ruby?arch=i686&distro=almalinux-8.1	almalinux	ruby	< 3.0.7-143.module_el8.10.0+3852+ce828b19	almalinux-8.1	i686
Affected	pkg:rpm/almalinux/ruby?arch=aarch64&distro=almalinux-8.1	almalinux	ruby	< 3.0.7-143.module_el8.10.0+3852+ce828b19	almalinux-8.1	aarch64
Affected	pkg:rpm/almalinux/ruby-libs?arch=x86_64&distro=almalinux-8.1	almalinux	ruby-libs	< 3.0.7-143.module_el8.10.0+3852+ce828b19	almalinux-8.1	x86_64
Affected	pkg:rpm/almalinux/ruby-libs?arch=i686&distro=almalinux-8.1	almalinux	ruby-libs	< 3.0.7-143.module_el8.10.0+3852+ce828b19	almalinux-8.1	i686
Affected	pkg:rpm/almalinux/ruby-libs?arch=aarch64&distro=almalinux-8.1	almalinux	ruby-libs	< 3.0.7-143.module_el8.10.0+3852+ce828b19	almalinux-8.1	aarch64
Affected	pkg:rpm/almalinux/ruby-doc?arch=noarch&distro=almalinux-8.1	almalinux	ruby-doc	< 3.0.7-143.module_el8.10.0+3852+ce828b19	almalinux-8.1	noarch
Affected	pkg:rpm/almalinux/ruby-devel?arch=x86_64&distro=almalinux-8.1	almalinux	ruby-devel	< 3.0.7-143.module_el8.10.0+3852+ce828b19	almalinux-8.1	x86_64
Affected	pkg:rpm/almalinux/ruby-devel?arch=i686&distro=almalinux-8.1	almalinux	ruby-devel	< 3.0.7-143.module_el8.10.0+3852+ce828b19	almalinux-8.1	i686
Affected	pkg:rpm/almalinux/ruby-devel?arch=aarch64&distro=almalinux-8.1	almalinux	ruby-devel	< 3.0.7-143.module_el8.10.0+3852+ce828b19	almalinux-8.1	aarch64
Affected	pkg:rpm/almalinux/ruby-default-gems?arch=noarch&distro=almalinux-8.1	almalinux	ruby-default-gems	< 3.0.7-143.module_el8.10.0+3852+ce828b19	almalinux-8.1	noarch

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date