1. Home
  2. Security Advisories
  3. Oracle Linux
  4. ELSA-2022-6585

[ELSA-2022-6585] ruby security, bug fix, and enhancement update

Severity Moderate
Affected Packages 22
CVEs 2
Info Packages References Vulnerabilities

[3.0.4-160]
- Upgrade to Ruby 3.0.4.
Resolves: rhbz#2109428
- OpenSSL test suite fixes due to disabled SHA1.
Related: rbhz#2109428
- Fix double free in Regexp compilation.
Resolves: CVE-2022-28738
- Fix buffer overrun in String-to-Float conversion.
Resolves: CVE-2022-28739

Package Affected Version
pkg:rpm/oraclelinux/rubygems?distro=oraclelinux-9.0 < 3.2.33-160.el9_0
pkg:rpm/oraclelinux/rubygems-devel?distro=oraclelinux-9.0 < 3.2.33-160.el9_0
pkg:rpm/oraclelinux/rubygem-typeprof?distro=oraclelinux-9.0 < 0.15.2-160.el9_0
pkg:rpm/oraclelinux/rubygem-test-unit?distro=oraclelinux-9.0 < 3.3.7-160.el9_0
pkg:rpm/oraclelinux/rubygem-rss?distro=oraclelinux-9.0 < 0.2.9-160.el9_0
pkg:rpm/oraclelinux/rubygem-rexml?distro=oraclelinux-9.0 < 3.2.5-160.el9_0
pkg:rpm/oraclelinux/rubygem-rdoc?distro=oraclelinux-9.0 < 6.3.3-160.el9_0
pkg:rpm/oraclelinux/rubygem-rbs?distro=oraclelinux-9.0 < 1.4.0-160.el9_0
pkg:rpm/oraclelinux/rubygem-rake?distro=oraclelinux-9.0 < 13.0.3-160.el9_0
pkg:rpm/oraclelinux/rubygem-psych?distro=oraclelinux-9.0 < 3.3.2-160.el9_0
pkg:rpm/oraclelinux/rubygem-power_assert?distro=oraclelinux-9.0 < 1.2.0-160.el9_0
pkg:rpm/oraclelinux/rubygem-minitest?distro=oraclelinux-9.0 < 5.14.2-160.el9_0
pkg:rpm/oraclelinux/rubygem-json?distro=oraclelinux-9.0 < 2.5.1-160.el9_0
pkg:rpm/oraclelinux/rubygem-irb?distro=oraclelinux-9.0 < 1.3.5-160.el9_0
pkg:rpm/oraclelinux/rubygem-io-console?distro=oraclelinux-9.0 < 0.5.7-160.el9_0
pkg:rpm/oraclelinux/rubygem-bundler?distro=oraclelinux-9.0 < 2.2.33-160.el9_0
pkg:rpm/oraclelinux/rubygem-bigdecimal?distro=oraclelinux-9.0 < 3.0.0-160.el9_0
pkg:rpm/oraclelinux/ruby?distro=oraclelinux-9.0 < 3.0.4-160.el9_0
pkg:rpm/oraclelinux/ruby-libs?distro=oraclelinux-9.0 < 3.0.4-160.el9_0
pkg:rpm/oraclelinux/ruby-doc?distro=oraclelinux-9.0 < 3.0.4-160.el9_0
pkg:rpm/oraclelinux/ruby-devel?distro=oraclelinux-9.0 < 3.0.4-160.el9_0
pkg:rpm/oraclelinux/ruby-default-gems?distro=oraclelinux-9.0 < 3.0.4-160.el9_0
ID
ELSA-2022-6585
Severity
moderate
URL
https://linux.oracle.com/errata/ELSA-2022-6585.html
Published
2022-09-21T00:00:00
(2 years ago)
Modified
2022-09-21T00:00:00
(2 years ago)
Rights
Copyright 2022 Oracle, Inc.
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/oraclelinux/rubygems?distro=oraclelinux-9.0 oraclelinux rubygems < 3.2.33-160.el9_0 oraclelinux-9.0
Affected pkg:rpm/oraclelinux/rubygems-devel?distro=oraclelinux-9.0 oraclelinux rubygems-devel < 3.2.33-160.el9_0 oraclelinux-9.0
Affected pkg:rpm/oraclelinux/rubygem-typeprof?distro=oraclelinux-9.0 oraclelinux rubygem-typeprof < 0.15.2-160.el9_0 oraclelinux-9.0
Affected pkg:rpm/oraclelinux/rubygem-test-unit?distro=oraclelinux-9.0 oraclelinux rubygem-test-unit < 3.3.7-160.el9_0 oraclelinux-9.0
Affected pkg:rpm/oraclelinux/rubygem-rss?distro=oraclelinux-9.0 oraclelinux rubygem-rss < 0.2.9-160.el9_0 oraclelinux-9.0
Affected pkg:rpm/oraclelinux/rubygem-rexml?distro=oraclelinux-9.0 oraclelinux rubygem-rexml < 3.2.5-160.el9_0 oraclelinux-9.0
Affected pkg:rpm/oraclelinux/rubygem-rdoc?distro=oraclelinux-9.0 oraclelinux rubygem-rdoc < 6.3.3-160.el9_0 oraclelinux-9.0
Affected pkg:rpm/oraclelinux/rubygem-rbs?distro=oraclelinux-9.0 oraclelinux rubygem-rbs < 1.4.0-160.el9_0 oraclelinux-9.0
Affected pkg:rpm/oraclelinux/rubygem-rake?distro=oraclelinux-9.0 oraclelinux rubygem-rake < 13.0.3-160.el9_0 oraclelinux-9.0
Affected pkg:rpm/oraclelinux/rubygem-psych?distro=oraclelinux-9.0 oraclelinux rubygem-psych < 3.3.2-160.el9_0 oraclelinux-9.0
Affected pkg:rpm/oraclelinux/rubygem-power_assert?distro=oraclelinux-9.0 oraclelinux rubygem-power_assert < 1.2.0-160.el9_0 oraclelinux-9.0
Affected pkg:rpm/oraclelinux/rubygem-minitest?distro=oraclelinux-9.0 oraclelinux rubygem-minitest < 5.14.2-160.el9_0 oraclelinux-9.0
Affected pkg:rpm/oraclelinux/rubygem-json?distro=oraclelinux-9.0 oraclelinux rubygem-json < 2.5.1-160.el9_0 oraclelinux-9.0
Affected pkg:rpm/oraclelinux/rubygem-irb?distro=oraclelinux-9.0 oraclelinux rubygem-irb < 1.3.5-160.el9_0 oraclelinux-9.0
Affected pkg:rpm/oraclelinux/rubygem-io-console?distro=oraclelinux-9.0 oraclelinux rubygem-io-console < 0.5.7-160.el9_0 oraclelinux-9.0
Affected pkg:rpm/oraclelinux/rubygem-bundler?distro=oraclelinux-9.0 oraclelinux rubygem-bundler < 2.2.33-160.el9_0 oraclelinux-9.0
Affected pkg:rpm/oraclelinux/rubygem-bigdecimal?distro=oraclelinux-9.0 oraclelinux rubygem-bigdecimal < 3.0.0-160.el9_0 oraclelinux-9.0
Affected pkg:rpm/oraclelinux/ruby?distro=oraclelinux-9.0 oraclelinux ruby < 3.0.4-160.el9_0 oraclelinux-9.0
Affected pkg:rpm/oraclelinux/ruby-libs?distro=oraclelinux-9.0 oraclelinux ruby-libs < 3.0.4-160.el9_0 oraclelinux-9.0
Affected pkg:rpm/oraclelinux/ruby-doc?distro=oraclelinux-9.0 oraclelinux ruby-doc < 3.0.4-160.el9_0 oraclelinux-9.0
Affected pkg:rpm/oraclelinux/ruby-devel?distro=oraclelinux-9.0 oraclelinux ruby-devel < 3.0.4-160.el9_0 oraclelinux-9.0
Affected pkg:rpm/oraclelinux/ruby-default-gems?distro=oraclelinux-9.0 oraclelinux ruby-default-gems < 3.0.4-160.el9_0 oraclelinux-9.0
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date