ELSA-2021-3020

ELSA-2021-3020 - ruby:2.7 security update

Type:SECURITY
Severity:IMPORTANT
Release Date:2021-08-06

Description


ruby
[2.7.4-137]
- Upgrade to Ruby 2.7.4.
- Fix command injection vulnerability in RDoc.
Resolves: rhbz#1986768
- Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
Resolves: rhbz#1986812
- Fix StartTLS stripping vulnerability in Net::IMAP.
Resolves: rhbz#1986813
- Upgrade to Bundler 2.2.24.
Resolves: CVE-2020-36327


Related CVEs


CVE-2020-36327
CVE-2021-31799
CVE-2021-32066
CVE-2021-31810

Updated Packages


Release/ArchitectureFilenameMD5sumSuperseded By Advisory
Oracle Linux 8 (aarch64) ruby-2.7.4-137.module+el8.4.0+20269+fcbf533e.src.rpm41f02f0003dd128f437ffe519145b4c5-
rubygem-abrt-0.4.0-1.module+el8.3.0+7760+537395ec.src.rpm8860669c32792fd386aac6c69f9d71af-
rubygem-bson-4.8.1-1.module+el8.4.0+20239+cbf59dc8.src.rpm848770a357613a161431c6abc416c9ca-
rubygem-mongo-2.11.3-1.module+el8.3.0+7760+537395ec.src.rpm4c17aaa7f6db250ae7cdb44f9445b087-
rubygem-mysql2-0.5.3-1.module+el8.4.0+20239+cbf59dc8.src.rpm300e23dd7a195f17271e0b2474abfeee-
rubygem-pg-1.2.3-1.module+el8.4.0+20239+cbf59dc8.src.rpmcf0e83ed9d88d3ce9e313b882b3e6521-
ruby-2.7.4-137.module+el8.4.0+20269+fcbf533e.aarch64.rpm2e53d49c9091784f51ff078bd844e605-
ruby-default-gems-2.7.4-137.module+el8.4.0+20269+fcbf533e.noarch.rpmc26a270b09a53896f5f630dc056b484f-
ruby-devel-2.7.4-137.module+el8.4.0+20269+fcbf533e.aarch64.rpma6edf961499631d9a79cbed68d35288d-
ruby-doc-2.7.4-137.module+el8.4.0+20269+fcbf533e.noarch.rpm6262f12279e8207cec713a24e0ec197c-
ruby-libs-2.7.4-137.module+el8.4.0+20269+fcbf533e.aarch64.rpm54258ca61aea8d1dd4ff56f4837dd4b4-
rubygem-abrt-0.4.0-1.module+el8.3.0+7760+537395ec.noarch.rpm84dc7c264bb13169fc0fb27318826500-
rubygem-abrt-doc-0.4.0-1.module+el8.3.0+7760+537395ec.noarch.rpm2a596618c4d5eb9e9ab58a585ed4af34-
rubygem-bigdecimal-2.0.0-137.module+el8.4.0+20269+fcbf533e.aarch64.rpm6d2e5e479a47c7e11fb41289480ef07d-
rubygem-bson-4.8.1-1.module+el8.4.0+20239+cbf59dc8.aarch64.rpmfcda92250f5ea72e6084ee2d073d80fe-
rubygem-bson-doc-4.8.1-1.module+el8.4.0+20239+cbf59dc8.noarch.rpmf468c7ba22d8d36ea7d2fd37fa7c5e5f-
rubygem-bundler-2.2.24-137.module+el8.4.0+20269+fcbf533e.noarch.rpmc3c5a23c2ed7ff5a090f77b4e42e90ed-
rubygem-io-console-0.5.6-137.module+el8.4.0+20269+fcbf533e.aarch64.rpmf00492c72b6bfca7399a4db131072b31-
rubygem-irb-1.2.6-137.module+el8.4.0+20269+fcbf533e.noarch.rpm5f14c5894577838e476b8aea12f3b92f-
rubygem-json-2.3.0-137.module+el8.4.0+20269+fcbf533e.aarch64.rpmc03839e0976dde19a01efebab09a6d16-
rubygem-minitest-5.13.0-137.module+el8.4.0+20269+fcbf533e.noarch.rpme5d40e327e5ea3274dd4a62877b41f1f-
rubygem-mongo-2.11.3-1.module+el8.3.0+7760+537395ec.noarch.rpme21b56a492f97f9befbff535f9d7b0f6-
rubygem-mongo-doc-2.11.3-1.module+el8.3.0+7760+537395ec.noarch.rpm312d9ac6a2d5a840553c18fdab7a07d4-
rubygem-mysql2-0.5.3-1.module+el8.4.0+20239+cbf59dc8.aarch64.rpm6149a528727ce26ec9daa4db1e0da0d4-
rubygem-mysql2-doc-0.5.3-1.module+el8.4.0+20239+cbf59dc8.noarch.rpme31c96742956bd28b960d3a19ac190ed-
rubygem-net-telnet-0.2.0-137.module+el8.4.0+20269+fcbf533e.noarch.rpmf2b23f5b4c20345c799ce8fc88e22acb-
rubygem-openssl-2.1.2-137.module+el8.4.0+20269+fcbf533e.aarch64.rpme3aa06d0b619e00df76b404f958cdc8f-
rubygem-pg-1.2.3-1.module+el8.4.0+20239+cbf59dc8.aarch64.rpme6d66919cc5b1a2d7b60b6d3bc5c849c-
rubygem-pg-doc-1.2.3-1.module+el8.4.0+20239+cbf59dc8.noarch.rpm371db737e81de488710afeb186146879-
rubygem-power_assert-1.1.7-137.module+el8.4.0+20269+fcbf533e.noarch.rpm9a3397f6f4e8cda4e11589ea7733f52d-
rubygem-psych-3.1.0-137.module+el8.4.0+20269+fcbf533e.aarch64.rpm4ce74aaea6bf47c7f95c8905ac58365c-
rubygem-rake-13.0.1-137.module+el8.4.0+20269+fcbf533e.noarch.rpm486a518aab0146ee4a09df4af8b9e65f-
rubygem-rdoc-6.2.1.1-137.module+el8.4.0+20269+fcbf533e.noarch.rpmf68deea6ca00977fd6a8377d19fc97aa-
rubygem-test-unit-3.3.4-137.module+el8.4.0+20269+fcbf533e.noarch.rpm391ba94cbd1598710170e46871c79bea-
rubygem-xmlrpc-0.3.0-137.module+el8.4.0+20269+fcbf533e.noarch.rpm1f923114d3fa4fe21fa60640b4af318c-
rubygems-3.1.6-137.module+el8.4.0+20269+fcbf533e.noarch.rpm0c2aa4faa0825c8610f3387af86f3121-
rubygems-devel-3.1.6-137.module+el8.4.0+20269+fcbf533e.noarch.rpme1a7565d21322559dc076716bb37f621-
Oracle Linux 8 (x86_64) ruby-2.7.4-137.module+el8.4.0+20269+fcbf533e.src.rpm41f02f0003dd128f437ffe519145b4c5-
rubygem-abrt-0.4.0-1.module+el8.3.0+7760+537395ec.src.rpm8860669c32792fd386aac6c69f9d71af-
rubygem-bson-4.8.1-1.module+el8.4.0+20239+cbf59dc8.src.rpm848770a357613a161431c6abc416c9ca-
rubygem-mongo-2.11.3-1.module+el8.3.0+7760+537395ec.src.rpm4c17aaa7f6db250ae7cdb44f9445b087-
rubygem-mysql2-0.5.3-1.module+el8.4.0+20239+cbf59dc8.src.rpm300e23dd7a195f17271e0b2474abfeee-
rubygem-pg-1.2.3-1.module+el8.4.0+20239+cbf59dc8.src.rpmcf0e83ed9d88d3ce9e313b882b3e6521-
ruby-2.7.4-137.module+el8.4.0+20269+fcbf533e.i686.rpm29d4aeffa1c245d9252e48f7ccb5c4fc-
ruby-2.7.4-137.module+el8.4.0+20269+fcbf533e.x86_64.rpm4c579109aaa52d63817e55708c01e006-
ruby-default-gems-2.7.4-137.module+el8.4.0+20269+fcbf533e.noarch.rpmc26a270b09a53896f5f630dc056b484f-
ruby-devel-2.7.4-137.module+el8.4.0+20269+fcbf533e.i686.rpm86f058345c8b0e20c76e3219f2569b26-
ruby-devel-2.7.4-137.module+el8.4.0+20269+fcbf533e.x86_64.rpme4b63bcebd452e3879e683c6fd9c15cc-
ruby-doc-2.7.4-137.module+el8.4.0+20269+fcbf533e.noarch.rpm6262f12279e8207cec713a24e0ec197c-
ruby-libs-2.7.4-137.module+el8.4.0+20269+fcbf533e.i686.rpm06b9ff5cc0e6f64e723cc969fbdee8d7-
ruby-libs-2.7.4-137.module+el8.4.0+20269+fcbf533e.x86_64.rpm0f01884a06fab706b04179b3b04c80c2-
rubygem-abrt-0.4.0-1.module+el8.3.0+7760+537395ec.noarch.rpm84dc7c264bb13169fc0fb27318826500-
rubygem-abrt-doc-0.4.0-1.module+el8.3.0+7760+537395ec.noarch.rpm2a596618c4d5eb9e9ab58a585ed4af34-
rubygem-bigdecimal-2.0.0-137.module+el8.4.0+20269+fcbf533e.i686.rpmf581666403c6a084054489c290010d0c-
rubygem-bigdecimal-2.0.0-137.module+el8.4.0+20269+fcbf533e.x86_64.rpm6b4c119180ad5bf5a7e00d73a121695c-
rubygem-bson-4.8.1-1.module+el8.4.0+20239+cbf59dc8.x86_64.rpmd3400d91c1f9080f637589c7ab85a5f7-
rubygem-bson-doc-4.8.1-1.module+el8.4.0+20239+cbf59dc8.noarch.rpmf468c7ba22d8d36ea7d2fd37fa7c5e5f-
rubygem-bundler-2.2.24-137.module+el8.4.0+20269+fcbf533e.noarch.rpmc3c5a23c2ed7ff5a090f77b4e42e90ed-
rubygem-io-console-0.5.6-137.module+el8.4.0+20269+fcbf533e.i686.rpm6cd87c07512cc2a335b45312213b09aa-
rubygem-io-console-0.5.6-137.module+el8.4.0+20269+fcbf533e.x86_64.rpmc96f2faa0c5484c18174fddb9a9931c0-
rubygem-irb-1.2.6-137.module+el8.4.0+20269+fcbf533e.noarch.rpm5f14c5894577838e476b8aea12f3b92f-
rubygem-json-2.3.0-137.module+el8.4.0+20269+fcbf533e.i686.rpm2cf563065f87b36dd3a2ee955b020e19-
rubygem-json-2.3.0-137.module+el8.4.0+20269+fcbf533e.x86_64.rpm588aadc23e5d29c86b08b7d3b1fa8ded-
rubygem-minitest-5.13.0-137.module+el8.4.0+20269+fcbf533e.noarch.rpme5d40e327e5ea3274dd4a62877b41f1f-
rubygem-mongo-2.11.3-1.module+el8.3.0+7760+537395ec.noarch.rpme21b56a492f97f9befbff535f9d7b0f6-
rubygem-mongo-doc-2.11.3-1.module+el8.3.0+7760+537395ec.noarch.rpm312d9ac6a2d5a840553c18fdab7a07d4-
rubygem-mysql2-0.5.3-1.module+el8.4.0+20239+cbf59dc8.x86_64.rpm6a769ed98f8488009c2038a62f80858d-
rubygem-mysql2-doc-0.5.3-1.module+el8.4.0+20239+cbf59dc8.noarch.rpme31c96742956bd28b960d3a19ac190ed-
rubygem-net-telnet-0.2.0-137.module+el8.4.0+20269+fcbf533e.noarch.rpmf2b23f5b4c20345c799ce8fc88e22acb-
rubygem-openssl-2.1.2-137.module+el8.4.0+20269+fcbf533e.i686.rpm47ff012a5a6229b1395bc61fb73307d2-
rubygem-openssl-2.1.2-137.module+el8.4.0+20269+fcbf533e.x86_64.rpm4ea7378500fd7a0856323336e413c9b8-
rubygem-pg-1.2.3-1.module+el8.4.0+20239+cbf59dc8.x86_64.rpmc30d50fd171c537fb832f08d9e2fecd5-
rubygem-pg-doc-1.2.3-1.module+el8.4.0+20239+cbf59dc8.noarch.rpm371db737e81de488710afeb186146879-
rubygem-power_assert-1.1.7-137.module+el8.4.0+20269+fcbf533e.noarch.rpm9a3397f6f4e8cda4e11589ea7733f52d-
rubygem-psych-3.1.0-137.module+el8.4.0+20269+fcbf533e.i686.rpm340b5f06d95226c535381d5300c309d0-
rubygem-psych-3.1.0-137.module+el8.4.0+20269+fcbf533e.x86_64.rpm992113b6697c6cfb869393e45464376c-
rubygem-rake-13.0.1-137.module+el8.4.0+20269+fcbf533e.noarch.rpm486a518aab0146ee4a09df4af8b9e65f-
rubygem-rdoc-6.2.1.1-137.module+el8.4.0+20269+fcbf533e.noarch.rpmf68deea6ca00977fd6a8377d19fc97aa-
rubygem-test-unit-3.3.4-137.module+el8.4.0+20269+fcbf533e.noarch.rpm391ba94cbd1598710170e46871c79bea-
rubygem-xmlrpc-0.3.0-137.module+el8.4.0+20269+fcbf533e.noarch.rpm1f923114d3fa4fe21fa60640b4af318c-
rubygems-3.1.6-137.module+el8.4.0+20269+fcbf533e.noarch.rpm0c2aa4faa0825c8610f3387af86f3121-
rubygems-devel-3.1.6-137.module+el8.4.0+20269+fcbf533e.noarch.rpme1a7565d21322559dc076716bb37f621-



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete