ALSA-2024:1576
- Source
- https://errata.almalinux.org/9/ALSA-2024-1576.html
- Import Source
- https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2024:1576.json
- Related
- Published
- 2024-04-01T00:00:00Z
- Modified
- 2024-04-02T16:11:56Z
- Summary
- Moderate: ruby:3.1 security, bug fix, and enhancement update
- Details
-
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.
The following packages have been upgraded to a later upstream version: ruby (3.1). (AlmaLinux-29052)
Security Fix(es):
- ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)
- ruby: ReDoS vulnerability in URI (CVE-2023-28755)
- ruby: ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755 (CVE-2023-36617)
- ruby: ReDoS vulnerability in Time (CVE-2023-28756)
Bug Fix(es):
- ruby/rubygem-irb: IRB has hard dependency on rubygem-rdoc (AlmaLinux-29048)
- ruby: Ruby cannot read private key in FIPS mode on AlmaLinux 9 (AlmaLinux-12437)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- References
-
- https://access.redhat.com/errata/RHSA-2024:1576
- https://access.redhat.com/security/cve/CVE-2021-33621
- https://access.redhat.com/security/cve/CVE-2023-28755
- https://access.redhat.com/security/cve/CVE-2023-28756
- https://access.redhat.com/security/cve/CVE-2023-36617
- https://bugzilla.redhat.com/2149706
- https://bugzilla.redhat.com/2184059
- https://bugzilla.redhat.com/2184061
- https://bugzilla.redhat.com/2218614
- https://errata.almalinux.org/9/ALSA-2024-1576.html
Affected packages
AlmaLinux:9 / ruby
Package
- Name
- ruby
AlmaLinux:9 / ruby-bundled-gems
Package
- Name
- ruby-bundled-gems
AlmaLinux:9 / ruby-default-gems
Package
- Name
- ruby-default-gems
AlmaLinux:9 / ruby-devel
Package
- Name
- ruby-devel
AlmaLinux:9 / ruby-doc
Package
- Name
- ruby-doc
AlmaLinux:9 / ruby-libs
Package
- Name
- ruby-libs
AlmaLinux:9 / rubygem-bigdecimal
Package
- Name
- rubygem-bigdecimal
AlmaLinux:9 / rubygem-bundler
Package
- Name
- rubygem-bundler
AlmaLinux:9 / rubygem-io-console
Package
- Name
- rubygem-io-console
AlmaLinux:9 / rubygem-irb
Package
- Name
- rubygem-irb
AlmaLinux:9 / rubygem-json
Package
- Name
- rubygem-json
AlmaLinux:9 / rubygem-minitest
Package
- Name
- rubygem-minitest
AlmaLinux:9 / rubygem-mysql2
Package
- Name
- rubygem-mysql2
AlmaLinux:9 / rubygem-mysql2-doc
Package
- Name
- rubygem-mysql2-doc
AlmaLinux:9 / rubygem-pg
Package
- Name
- rubygem-pg
AlmaLinux:9 / rubygem-pg-doc
Package
- Name
- rubygem-pg-doc
AlmaLinux:9 / rubygem-power_assert
Package
- Name
- rubygem-power_assert
AlmaLinux:9 / rubygem-psych
Package
- Name
- rubygem-psych
AlmaLinux:9 / rubygem-rake
Package
- Name
- rubygem-rake
AlmaLinux:9 / rubygem-rbs
Package
- Name
- rubygem-rbs
AlmaLinux:9 / rubygem-rdoc
Package
- Name
- rubygem-rdoc
AlmaLinux:9 / rubygem-rexml
Package
- Name
- rubygem-rexml
AlmaLinux:9 / rubygem-rss
Package
- Name
- rubygem-rss
AlmaLinux:9 / rubygem-test-unit
Package
- Name
- rubygem-test-unit
AlmaLinux:9 / rubygem-typeprof
Package
- Name
- rubygem-typeprof
AlmaLinux:9 / rubygems
Package
- Name
- rubygems