Issued:
2022-09-13
Updated:
2022-09-13

RHSA-2022:6450 - Moderate: ruby:3.0 security, bug fix, and enhancement update

Synopsis

Moderate: ruby:3.0 security, bug fix, and enhancement update

Type/Severity

Security Advisory Moderate

Topic

An update for the ruby:3.0 module is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

The following packages have been upgraded to a later upstream version: ruby (3.0.4). (BZ#2109431)

Security Fix(es):

  • ruby: Regular expression denial of service vulnerability of Date parsing methods (CVE-2021-41817)

  • ruby: Cookie prefix spoofing in CGI::Cookie.parse (CVE-2021-41819)

  • Ruby: Double free in Regexp compilation (CVE-2022-28738)

  • Ruby: Buffer overrun in String-to-Float conversion (CVE-2022-28739)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • ruby 3.0: User-installed rubygems plugins are not being loaded [RHEL8] (BZ#2110981)

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

ProductVersionArch
Red Hat Enterprise Linux for x86_648x86_64
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions8.8x86_64
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions8.6x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support8.8x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support8.6x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension8.8x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension8.6x86_64
Red Hat Enterprise Linux for x86_64 - Extended Life Cycle8.10x86_64
Red Hat Enterprise Linux for Power, little endian8ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support8.8ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support8.6ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle8.10ppc64le
Red Hat Enterprise Linux for IBM z Systems8s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support8.8s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support8.6s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle8.10s390x
Red Hat Enterprise Linux for ARM 648aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support8.8aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support8.6aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle8.10aarch64
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions8.8ppc64le
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions8.6ppc64le
Red Hat Enterprise Linux Server - TUS8.8x86_64
Red Hat Enterprise Linux Server - TUS8.6x86_64
Red Hat Enterprise Linux Server - AUS8.6x86_64

Updated Packages

  • ruby-doc-3.0.4-141.module+el8.6.0+16311+3e5e17e9.noarch.rpm
  • rubygem-io-console-debuginfo-0.5.7-141.module+el8.6.0+16311+3e5e17e9.ppc64le.rpm
  • ruby-debugsource-3.0.4-141.module+el8.6.0+16311+3e5e17e9.ppc64le.rpm
  • rubygem-pg-1.2.3-1.module+el8.5.0+11580+845038eb.src.rpm
  • rubygem-psych-debuginfo-3.3.2-141.module+el8.6.0+16311+3e5e17e9.ppc64le.rpm
  • ruby-debuginfo-3.0.4-141.module+el8.6.0+16311+3e5e17e9.ppc64le.rpm
  • rubygem-test-unit-3.3.7-141.module+el8.6.0+16311+3e5e17e9.noarch.rpm
  • rubygem-mysql2-doc-0.5.3-1.module+el8.5.0+11580+845038eb.noarch.rpm
  • rubygem-minitest-5.14.2-141.module+el8.6.0+16311+3e5e17e9.noarch.rpm
  • rubygem-irb-1.3.5-141.module+el8.6.0+16311+3e5e17e9.noarch.rpm
  • rubygem-json-debuginfo-2.5.1-141.module+el8.6.0+16311+3e5e17e9.ppc64le.rpm
  • ruby-default-gems-3.0.4-141.module+el8.6.0+16311+3e5e17e9.noarch.rpm
  • rubygem-mysql2-0.5.3-1.module+el8.5.0+11580+845038eb.ppc64le.rpm
  • rubygem-abrt-0.4.0-1.module+el8.5.0+11580+845038eb.src.rpm
  • rubygem-bigdecimal-debuginfo-3.0.0-141.module+el8.6.0+16311+3e5e17e9.ppc64le.rpm
  • rubygem-pg-1.2.3-1.module+el8.5.0+11580+845038eb.ppc64le.rpm
  • rubygem-pg-debuginfo-1.2.3-1.module+el8.5.0+11580+845038eb.ppc64le.rpm
  • rubygems-3.2.33-141.module+el8.6.0+16311+3e5e17e9.noarch.rpm
  • rubygem-pg-debugsource-1.2.3-1.module+el8.5.0+11580+845038eb.ppc64le.rpm
  • rubygems-devel-3.2.33-141.module+el8.6.0+16311+3e5e17e9.noarch.rpm
  • rubygem-bigdecimal-3.0.0-141.module+el8.6.0+16311+3e5e17e9.ppc64le.rpm
  • rubygem-mysql2-debugsource-0.5.3-1.module+el8.5.0+11580+845038eb.ppc64le.rpm
  • rubygem-mysql2-debuginfo-0.5.3-1.module+el8.5.0+11580+845038eb.ppc64le.rpm
  • ruby-3.0.4-141.module+el8.6.0+16311+3e5e17e9.src.rpm
  • rubygem-json-2.5.1-141.module+el8.6.0+16311+3e5e17e9.ppc64le.rpm
  • rubygem-abrt-doc-0.4.0-1.module+el8.5.0+11580+845038eb.noarch.rpm
  • ruby-libs-3.0.4-141.module+el8.6.0+16311+3e5e17e9.ppc64le.rpm
  • rubygem-rbs-1.4.0-141.module+el8.6.0+16311+3e5e17e9.noarch.rpm
  • rubygem-rdoc-6.3.3-141.module+el8.6.0+16311+3e5e17e9.noarch.rpm
  • rubygem-abrt-0.4.0-1.module+el8.5.0+11580+845038eb.noarch.rpm
  • rubygem-io-console-0.5.7-141.module+el8.6.0+16311+3e5e17e9.ppc64le.rpm
  • rubygem-mysql2-0.5.3-1.module+el8.5.0+11580+845038eb.src.rpm
  • rubygem-typeprof-0.15.2-141.module+el8.6.0+16311+3e5e17e9.noarch.rpm
  • rubygem-bundler-2.2.33-141.module+el8.6.0+16311+3e5e17e9.noarch.rpm
  • rubygem-rake-13.0.3-141.module+el8.6.0+16311+3e5e17e9.noarch.rpm
  • rubygem-pg-doc-1.2.3-1.module+el8.5.0+11580+845038eb.noarch.rpm
  • ruby-devel-3.0.4-141.module+el8.6.0+16311+3e5e17e9.ppc64le.rpm
  • rubygem-power_assert-1.2.0-141.module+el8.6.0+16311+3e5e17e9.noarch.rpm
  • rubygem-psych-3.3.2-141.module+el8.6.0+16311+3e5e17e9.ppc64le.rpm
  • ruby-libs-debuginfo-3.0.4-141.module+el8.6.0+16311+3e5e17e9.ppc64le.rpm
  • rubygem-rss-0.2.9-141.module+el8.6.0+16311+3e5e17e9.noarch.rpm
  • ruby-3.0.4-141.module+el8.6.0+16311+3e5e17e9.ppc64le.rpm
  • rubygem-rexml-3.2.5-141.module+el8.6.0+16311+3e5e17e9.noarch.rpm
  • ruby-3.0.4-141.module+el8.6.0+16311+3e5e17e9.aarch64.rpm
  • rubygem-json-debuginfo-2.5.1-141.module+el8.6.0+16311+3e5e17e9.aarch64.rpm
  • rubygem-bigdecimal-debuginfo-3.0.0-141.module+el8.6.0+16311+3e5e17e9.aarch64.rpm
  • ruby-devel-3.0.4-141.module+el8.6.0+16311+3e5e17e9.aarch64.rpm
  • ruby-debugsource-3.0.4-141.module+el8.6.0+16311+3e5e17e9.aarch64.rpm
  • rubygem-mysql2-debuginfo-0.5.3-1.module+el8.5.0+11580+845038eb.aarch64.rpm
  • ruby-libs-debuginfo-3.0.4-141.module+el8.6.0+16311+3e5e17e9.aarch64.rpm
  • rubygem-pg-debugsource-1.2.3-1.module+el8.5.0+11580+845038eb.aarch64.rpm
  • rubygem-pg-debuginfo-1.2.3-1.module+el8.5.0+11580+845038eb.aarch64.rpm
  • rubygem-io-console-0.5.7-141.module+el8.6.0+16311+3e5e17e9.aarch64.rpm
  • rubygem-mysql2-debugsource-0.5.3-1.module+el8.5.0+11580+845038eb.aarch64.rpm
  • rubygem-psych-3.3.2-141.module+el8.6.0+16311+3e5e17e9.aarch64.rpm
  • rubygem-psych-debuginfo-3.3.2-141.module+el8.6.0+16311+3e5e17e9.aarch64.rpm
  • rubygem-json-2.5.1-141.module+el8.6.0+16311+3e5e17e9.aarch64.rpm
  • rubygem-bigdecimal-3.0.0-141.module+el8.6.0+16311+3e5e17e9.aarch64.rpm
  • rubygem-pg-1.2.3-1.module+el8.5.0+11580+845038eb.aarch64.rpm
  • ruby-libs-3.0.4-141.module+el8.6.0+16311+3e5e17e9.aarch64.rpm
  • ruby-debuginfo-3.0.4-141.module+el8.6.0+16311+3e5e17e9.aarch64.rpm
  • rubygem-io-console-debuginfo-0.5.7-141.module+el8.6.0+16311+3e5e17e9.aarch64.rpm
  • rubygem-mysql2-0.5.3-1.module+el8.5.0+11580+845038eb.aarch64.rpm
  • ruby-libs-3.0.4-141.module+el8.6.0+16311+3e5e17e9.s390x.rpm
  • rubygem-bigdecimal-debuginfo-3.0.0-141.module+el8.6.0+16311+3e5e17e9.s390x.rpm
  • ruby-debugsource-3.0.4-141.module+el8.6.0+16311+3e5e17e9.s390x.rpm
  • rubygem-json-debuginfo-2.5.1-141.module+el8.6.0+16311+3e5e17e9.s390x.rpm
  • rubygem-pg-1.2.3-1.module+el8.5.0+11580+845038eb.s390x.rpm
  • ruby-debuginfo-3.0.4-141.module+el8.6.0+16311+3e5e17e9.s390x.rpm
  • rubygem-io-console-debuginfo-0.5.7-141.module+el8.6.0+16311+3e5e17e9.s390x.rpm
  • rubygem-psych-3.3.2-141.module+el8.6.0+16311+3e5e17e9.s390x.rpm
  • rubygem-mysql2-debuginfo-0.5.3-1.module+el8.5.0+11580+845038eb.s390x.rpm
  • rubygem-pg-debuginfo-1.2.3-1.module+el8.5.0+11580+845038eb.s390x.rpm
  • rubygem-mysql2-0.5.3-1.module+el8.5.0+11580+845038eb.s390x.rpm
  • rubygem-json-2.5.1-141.module+el8.6.0+16311+3e5e17e9.s390x.rpm
  • rubygem-mysql2-debugsource-0.5.3-1.module+el8.5.0+11580+845038eb.s390x.rpm
  • ruby-3.0.4-141.module+el8.6.0+16311+3e5e17e9.s390x.rpm
  • rubygem-pg-debugsource-1.2.3-1.module+el8.5.0+11580+845038eb.s390x.rpm
  • ruby-libs-debuginfo-3.0.4-141.module+el8.6.0+16311+3e5e17e9.s390x.rpm
  • rubygem-psych-debuginfo-3.3.2-141.module+el8.6.0+16311+3e5e17e9.s390x.rpm
  • ruby-devel-3.0.4-141.module+el8.6.0+16311+3e5e17e9.s390x.rpm
  • rubygem-bigdecimal-3.0.0-141.module+el8.6.0+16311+3e5e17e9.s390x.rpm
  • rubygem-io-console-0.5.7-141.module+el8.6.0+16311+3e5e17e9.s390x.rpm
  • rubygem-psych-debuginfo-3.3.2-141.module+el8.6.0+16311+3e5e17e9.x86_64.rpm
  • ruby-debuginfo-3.0.4-141.module+el8.6.0+16311+3e5e17e9.i686.rpm
  • rubygem-json-2.5.1-141.module+el8.6.0+16311+3e5e17e9.x86_64.rpm
  • rubygem-bigdecimal-3.0.0-141.module+el8.6.0+16311+3e5e17e9.i686.rpm
  • rubygem-json-debuginfo-2.5.1-141.module+el8.6.0+16311+3e5e17e9.i686.rpm
  • rubygem-pg-1.2.3-1.module+el8.5.0+11580+845038eb.x86_64.rpm
  • ruby-3.0.4-141.module+el8.6.0+16311+3e5e17e9.x86_64.rpm
  • rubygem-json-2.5.1-141.module+el8.6.0+16311+3e5e17e9.i686.rpm
  • ruby-debuginfo-3.0.4-141.module+el8.6.0+16311+3e5e17e9.x86_64.rpm
  • ruby-libs-3.0.4-141.module+el8.6.0+16311+3e5e17e9.i686.rpm
  • rubygem-psych-3.3.2-141.module+el8.6.0+16311+3e5e17e9.x86_64.rpm
  • ruby-devel-3.0.4-141.module+el8.6.0+16311+3e5e17e9.i686.rpm
  • ruby-devel-3.0.4-141.module+el8.6.0+16311+3e5e17e9.x86_64.rpm
  • rubygem-io-console-0.5.7-141.module+el8.6.0+16311+3e5e17e9.x86_64.rpm
  • rubygem-bigdecimal-debuginfo-3.0.0-141.module+el8.6.0+16311+3e5e17e9.x86_64.rpm
  • rubygem-pg-debugsource-1.2.3-1.module+el8.5.0+11580+845038eb.x86_64.rpm
  • rubygem-mysql2-0.5.3-1.module+el8.5.0+11580+845038eb.x86_64.rpm
  • rubygem-io-console-debuginfo-0.5.7-141.module+el8.6.0+16311+3e5e17e9.i686.rpm
  • rubygem-bigdecimal-3.0.0-141.module+el8.6.0+16311+3e5e17e9.x86_64.rpm
  • ruby-libs-debuginfo-3.0.4-141.module+el8.6.0+16311+3e5e17e9.x86_64.rpm
  • rubygem-pg-debuginfo-1.2.3-1.module+el8.5.0+11580+845038eb.x86_64.rpm
  • rubygem-psych-debuginfo-3.3.2-141.module+el8.6.0+16311+3e5e17e9.i686.rpm
  • ruby-libs-debuginfo-3.0.4-141.module+el8.6.0+16311+3e5e17e9.i686.rpm
  • rubygem-io-console-debuginfo-0.5.7-141.module+el8.6.0+16311+3e5e17e9.x86_64.rpm
  • rubygem-io-console-0.5.7-141.module+el8.6.0+16311+3e5e17e9.i686.rpm
  • ruby-libs-3.0.4-141.module+el8.6.0+16311+3e5e17e9.x86_64.rpm
  • ruby-debugsource-3.0.4-141.module+el8.6.0+16311+3e5e17e9.i686.rpm
  • rubygem-bigdecimal-debuginfo-3.0.0-141.module+el8.6.0+16311+3e5e17e9.i686.rpm
  • rubygem-json-debuginfo-2.5.1-141.module+el8.6.0+16311+3e5e17e9.x86_64.rpm
  • rubygem-mysql2-debuginfo-0.5.3-1.module+el8.5.0+11580+845038eb.x86_64.rpm
  • ruby-debugsource-3.0.4-141.module+el8.6.0+16311+3e5e17e9.x86_64.rpm
  • ruby-3.0.4-141.module+el8.6.0+16311+3e5e17e9.i686.rpm
  • rubygem-psych-3.3.2-141.module+el8.6.0+16311+3e5e17e9.i686.rpm
  • rubygem-mysql2-debugsource-0.5.3-1.module+el8.5.0+11580+845038eb.x86_64.rpm

Fixes

CVEs

References

Additional information