rhsa-2022_0708
Vulnerability from csaf_redhat
Published
2022-02-28 19:00
Modified
2024-11-15 12:00
Summary
Red Hat Security Advisory: rh-ruby26-ruby security, bug fix, and enhancement update
Notes
Topic
An update for rh-ruby26-ruby is now available for Red Hat Software Collections.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.
The following packages have been upgraded to a later upstream version: rh-ruby26-ruby (2.6.9). (BZ#2056947)
Security Fix(es):
* rubygem-bundler: Dependencies of gems with explicit source may be installed from a different source (CVE-2020-36327)
* rubygem-rdoc: Command injection vulnerability in RDoc (CVE-2021-31799)
* ruby: FTP PASV command response can cause Net::FTP to connect to arbitrary host (CVE-2021-31810)
* ruby: StartTLS stripping vulnerability in Net::IMAP (CVE-2021-32066)
* ruby: Regular expression denial of service vulnerability of Date parsing methods (CVE-2021-41817)
* ruby: Cookie prefix spoofing in CGI::Cookie.parse (CVE-2021-41819)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for rh-ruby26-ruby is now available for Red Hat Software Collections.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. \n\nThe following packages have been upgraded to a later upstream version: rh-ruby26-ruby (2.6.9). (BZ#2056947)\n\nSecurity Fix(es):\n\n* rubygem-bundler: Dependencies of gems with explicit source may be installed from a different source (CVE-2020-36327)\n\n* rubygem-rdoc: Command injection vulnerability in RDoc (CVE-2021-31799)\n\n* ruby: FTP PASV command response can cause Net::FTP to connect to arbitrary host (CVE-2021-31810)\n\n* ruby: StartTLS stripping vulnerability in Net::IMAP (CVE-2021-32066)\n\n* ruby: Regular expression denial of service vulnerability of Date parsing methods (CVE-2021-41817)\n\n* ruby: Cookie prefix spoofing in CGI::Cookie.parse (CVE-2021-41819)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2022:0708",
"url": "https://access.redhat.com/errata/RHSA-2022:0708"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/articles/6206172",
"url": "https://access.redhat.com/articles/6206172"
},
{
"category": "external",
"summary": "1958999",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1958999"
},
{
"category": "external",
"summary": "1980126",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1980126"
},
{
"category": "external",
"summary": "1980128",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1980128"
},
{
"category": "external",
"summary": "1980132",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1980132"
},
{
"category": "external",
"summary": "2025104",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2025104"
},
{
"category": "external",
"summary": "2026757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2026757"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0708.json"
}
],
"title": "Red Hat Security Advisory: rh-ruby26-ruby security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2024-11-15T12:00:43+00:00",
"generator": {
"date": "2024-11-15T12:00:43+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2022:0708",
"initial_release_date": "2022-02-28T19:00:13+00:00",
"revision_history": [
{
"date": "2022-02-28T19:00:13+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2022-02-28T19:00:13+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-15T12:00:43+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Software Collections for RHEL Workstation(v. 7)",
"product": {
"name": "Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for RHEL(v. 7)",
"product": {
"name": "Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Software Collections"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-ruby26-ruby-0:2.6.9-120.el7.src",
"product": {
"name": "rh-ruby26-ruby-0:2.6.9-120.el7.src",
"product_id": "rh-ruby26-ruby-0:2.6.9-120.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-ruby@2.6.9-120.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"product": {
"name": "rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"product_id": "rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-ruby@2.6.9-120.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"product": {
"name": "rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"product_id": "rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-ruby-devel@2.6.9-120.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"product": {
"name": "rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"product_id": "rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-ruby-libs@2.6.9-120.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"product": {
"name": "rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"product_id": "rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-rubygem-bigdecimal@1.4.1-120.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"product": {
"name": "rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"product_id": "rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-rubygem-io-console@0.4.7-120.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"product": {
"name": "rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"product_id": "rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-rubygem-json@2.1.0-120.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"product": {
"name": "rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"product_id": "rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-rubygem-openssl@2.1.2-120.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"product": {
"name": "rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"product_id": "rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-rubygem-psych@3.1.0-120.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"product": {
"name": "rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"product_id": "rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-ruby-debuginfo@2.6.9-120.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"product": {
"name": "rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"product_id": "rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-ruby-doc@2.6.9-120.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"product": {
"name": "rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"product_id": "rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-rubygem-bundler@1.17.2-120.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"product": {
"name": "rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"product_id": "rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-rubygem-did_you_mean@1.3.0-120.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"product": {
"name": "rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"product_id": "rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-rubygem-irb@1.0.0-120.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"product": {
"name": "rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"product_id": "rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-rubygem-minitest@5.11.3-120.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"product": {
"name": "rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"product_id": "rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-rubygem-net-telnet@0.2.0-120.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"product": {
"name": "rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"product_id": "rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-rubygem-power_assert@1.1.3-120.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"product": {
"name": "rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"product_id": "rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-rubygem-rake@12.3.3-120.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"product": {
"name": "rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"product_id": "rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-rubygem-rdoc@6.1.2.1-120.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"product": {
"name": "rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"product_id": "rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-rubygem-test-unit@3.2.9-120.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"product": {
"name": "rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"product_id": "rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-rubygem-xmlrpc@0.3.0-120.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"product": {
"name": "rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"product_id": "rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-rubygems@3.0.3.1-120.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch",
"product": {
"name": "rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch",
"product_id": "rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-rubygems-devel@3.0.3.1-120.el7?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"product": {
"name": "rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"product_id": "rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-ruby@2.6.9-120.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"product": {
"name": "rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"product_id": "rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-ruby-devel@2.6.9-120.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"product": {
"name": "rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"product_id": "rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-ruby-libs@2.6.9-120.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"product": {
"name": "rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"product_id": "rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-rubygem-bigdecimal@1.4.1-120.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"product": {
"name": "rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"product_id": "rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-rubygem-io-console@0.4.7-120.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"product": {
"name": "rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"product_id": "rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-rubygem-json@2.1.0-120.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"product": {
"name": "rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"product_id": "rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-rubygem-openssl@2.1.2-120.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"product": {
"name": "rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"product_id": "rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-rubygem-psych@3.1.0-120.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"product": {
"name": "rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"product_id": "rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-ruby-debuginfo@2.6.9-120.el7?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"product": {
"name": "rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"product_id": "rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-ruby@2.6.9-120.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"product": {
"name": "rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"product_id": "rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-ruby-devel@2.6.9-120.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"product": {
"name": "rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"product_id": "rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-ruby-libs@2.6.9-120.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"product": {
"name": "rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"product_id": "rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-rubygem-bigdecimal@1.4.1-120.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"product": {
"name": "rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"product_id": "rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-rubygem-io-console@0.4.7-120.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"product": {
"name": "rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"product_id": "rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-rubygem-json@2.1.0-120.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"product": {
"name": "rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"product_id": "rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-rubygem-openssl@2.1.2-120.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"product": {
"name": "rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"product_id": "rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-rubygem-psych@3.1.0-120.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"product": {
"name": "rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"product_id": "rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ruby26-ruby-debuginfo@2.6.9-120.el7?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le"
},
"product_reference": "rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-ruby-0:2.6.9-120.el7.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.s390x"
},
"product_reference": "rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-ruby-0:2.6.9-120.el7.src as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.src"
},
"product_reference": "rh-ruby26-ruby-0:2.6.9-120.el7.src",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-ruby-0:2.6.9-120.el7.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.x86_64"
},
"product_reference": "rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le"
},
"product_reference": "rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x"
},
"product_reference": "rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64"
},
"product_reference": "rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le"
},
"product_reference": "rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x"
},
"product_reference": "rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64"
},
"product_reference": "rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch"
},
"product_reference": "rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le"
},
"product_reference": "rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x"
},
"product_reference": "rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64"
},
"product_reference": "rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le"
},
"product_reference": "rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x"
},
"product_reference": "rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64"
},
"product_reference": "rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch"
},
"product_reference": "rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch"
},
"product_reference": "rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le"
},
"product_reference": "rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x"
},
"product_reference": "rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64"
},
"product_reference": "rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch"
},
"product_reference": "rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le"
},
"product_reference": "rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x"
},
"product_reference": "rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64"
},
"product_reference": "rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch"
},
"product_reference": "rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch"
},
"product_reference": "rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le"
},
"product_reference": "rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x"
},
"product_reference": "rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64"
},
"product_reference": "rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch"
},
"product_reference": "rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le"
},
"product_reference": "rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x"
},
"product_reference": "rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64"
},
"product_reference": "rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch"
},
"product_reference": "rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch"
},
"product_reference": "rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch"
},
"product_reference": "rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch"
},
"product_reference": "rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch"
},
"product_reference": "rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch"
},
"product_reference": "rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le"
},
"product_reference": "rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-ruby-0:2.6.9-120.el7.s390x as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.s390x"
},
"product_reference": "rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-ruby-0:2.6.9-120.el7.src as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.src"
},
"product_reference": "rh-ruby26-ruby-0:2.6.9-120.el7.src",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-ruby-0:2.6.9-120.el7.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.x86_64"
},
"product_reference": "rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le"
},
"product_reference": "rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x"
},
"product_reference": "rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64"
},
"product_reference": "rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le"
},
"product_reference": "rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x"
},
"product_reference": "rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64"
},
"product_reference": "rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch"
},
"product_reference": "rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le"
},
"product_reference": "rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x"
},
"product_reference": "rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64"
},
"product_reference": "rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le"
},
"product_reference": "rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x"
},
"product_reference": "rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64"
},
"product_reference": "rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch"
},
"product_reference": "rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch"
},
"product_reference": "rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le"
},
"product_reference": "rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x"
},
"product_reference": "rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64"
},
"product_reference": "rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch"
},
"product_reference": "rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le"
},
"product_reference": "rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x"
},
"product_reference": "rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64"
},
"product_reference": "rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch"
},
"product_reference": "rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch"
},
"product_reference": "rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le"
},
"product_reference": "rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x"
},
"product_reference": "rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64"
},
"product_reference": "rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch"
},
"product_reference": "rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le"
},
"product_reference": "rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x"
},
"product_reference": "rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64"
},
"product_reference": "rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch"
},
"product_reference": "rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch"
},
"product_reference": "rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch"
},
"product_reference": "rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch"
},
"product_reference": "rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch"
},
"product_reference": "rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch"
},
"product_reference": "rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2020-36327",
"cwe": {
"id": "CWE-494",
"name": "Download of Code Without Integrity Check"
},
"discovery_date": "2021-05-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1958999"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the way Bundler determined the source repository when installing dependencies of source-restricted gem packages. In configurations that use multiple gem repositories and explicitly define from which source repository certain gems are to be installed, a dependency of a source-restricted gem could be installed form a different source if that repository provided higher version of the package. This could lead to installation of a malicious gem version and arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-bundler: Dependencies of gems with explicit source may be installed from a different source",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Satellite does not ship RubyGem bundler, however, the product consumes it from the Red Hat Software Collections (RHSCL) repository.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.src",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.src",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-36327"
},
{
"category": "external",
"summary": "RHBZ#1958999",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1958999"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-36327",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-36327"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-36327",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-36327"
},
{
"category": "external",
"summary": "https://access.redhat.com/articles/6206172",
"url": "https://access.redhat.com/articles/6206172"
},
{
"category": "external",
"summary": "https://www.zofrex.com/blog/2021/04/29/bundler-still-vulnerable-dependency-confusion-cve-2020-36327/",
"url": "https://www.zofrex.com/blog/2021/04/29/bundler-still-vulnerable-dependency-confusion-cve-2020-36327/"
}
],
"release_date": "2021-02-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2022-02-28T19:00:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.src",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.src",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2022:0708"
},
{
"category": "workaround",
"details": "This issue only affects configurations where gem packages are installed from multiple sources and the source repositories are explicitly defined for at least some gems. Dependencies of those source-restricted gems may be installed form a different repository, even if the same repository provides those dependencies, which is inconsistent with the intended behaviour described in the Bundler documentation. There are multiple possible approaches to mitigate this issue - customers should evaluate which approaches are usable in their environments.\n\n* Explicitly define source for all dependency gems in the Gemfile configuration. When a dependency of a source-restricted gem is also to be installed form the same source, list such dependency explicitly in the Gemfile along with the specific source.\n\n* Avoid configurations with multiple source repositories. When using a private repository for non-public gems, use the same private repository to mirror any content required from any public gem repository, such as RubyGems.org. When preparing such mirror, ensure that no mirrored gems have names conflicting with names of the internal non-public gems.\n\n* Reserve internal package names in public repositories. For any internal private gem, also reserve the name in any public gem repository used, such as RubyGems.org. This will prevent attackers from registering those names and providing their malicious gems with higher versions.\n\nAdditional information about affected configurations can be found in the following Red Hat Knowledgebase article:\n\nhttps://access.redhat.com/articles/6206172",
"product_ids": [
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.src",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.src",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.src",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.src",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "rubygem-bundler: Dependencies of gems with explicit source may be installed from a different source"
},
{
"cve": "CVE-2021-31799",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"discovery_date": "2021-05-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1980132"
}
],
"notes": [
{
"category": "description",
"text": "An operating system command injection flaw was found in RDoc. Using the rdoc command to generate documentation for a malicious Ruby source code could lead to execution of arbitrary commands with the privileges of the user running rdoc.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rdoc: Command injection vulnerability in RDoc",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.src",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.src",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-31799"
},
{
"category": "external",
"summary": "RHBZ#1980132",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1980132"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-31799",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-31799"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-31799",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-31799"
},
{
"category": "external",
"summary": "https://www.ruby-lang.org/en/news/2021/05/02/os-command-injection-in-rdoc/",
"url": "https://www.ruby-lang.org/en/news/2021/05/02/os-command-injection-in-rdoc/"
}
],
"release_date": "2021-05-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2022-02-28T19:00:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.src",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.src",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2022:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.src",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.src",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rdoc: Command injection vulnerability in RDoc"
},
{
"cve": "CVE-2021-31810",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2021-07-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1980126"
}
],
"notes": [
{
"category": "description",
"text": "Ruby\u0027s Net::FTP module trusted the IP address included in the FTP server\u0027s response to the PASV command. A malicious FTP server could use this to make Ruby applications using the Net::FTP module to connect to arbitrary hosts and use this to perform port scanning or information extraction from systems not accessible from the FTP server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ruby: FTP PASV command response can cause Net::FTP to connect to arbitrary host",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat CloudForms 5.11 does not ship Ruby or RubyGem net-ftp and thus not affected by the flaw. RubyGem net-sftp (Ruby implementation of Secure File Transfer Protocol) which product ship is different library component from the affected package.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.src",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.src",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-31810"
},
{
"category": "external",
"summary": "RHBZ#1980126",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1980126"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-31810",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-31810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-31810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-31810"
},
{
"category": "external",
"summary": "https://www.ruby-lang.org/en/news/2021/07/07/trusting-pasv-responses-in-net-ftp/",
"url": "https://www.ruby-lang.org/en/news/2021/07/07/trusting-pasv-responses-in-net-ftp/"
}
],
"release_date": "2021-07-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2022-02-28T19:00:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.src",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.src",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2022:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.src",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.src",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "ruby: FTP PASV command response can cause Net::FTP to connect to arbitrary host"
},
{
"cve": "CVE-2021-32066",
"cwe": {
"id": "CWE-319",
"name": "Cleartext Transmission of Sensitive Information"
},
"discovery_date": "2021-07-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1980128"
}
],
"notes": [
{
"category": "description",
"text": "Ruby\u0027s Net::IMAP module did not raise an exception when receiving an unexpected response to the STARTTLS command and the connection was not upgraded to use TLS. A man-in-the-middle attacker could use this flaw to prevent Ruby applications using Net::IMAP to enable TLS encryption for a connection to an IMAP server and subsequently eavesdrop on or modify data sent over the plain text connection.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ruby: StartTLS stripping vulnerability in Net::IMAP",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.src",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.src",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-32066"
},
{
"category": "external",
"summary": "RHBZ#1980128",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1980128"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-32066",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-32066"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-32066",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-32066"
},
{
"category": "external",
"summary": "https://www.ruby-lang.org/en/news/2021/07/07/starttls-stripping-in-net-imap/",
"url": "https://www.ruby-lang.org/en/news/2021/07/07/starttls-stripping-in-net-imap/"
}
],
"release_date": "2021-07-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2022-02-28T19:00:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.src",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.src",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2022:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.src",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.src",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "ruby: StartTLS stripping vulnerability in Net::IMAP"
},
{
"cve": "CVE-2021-41817",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2021-11-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2025104"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ruby, where the date object was found to be vulnerable to a regular expression denial of service (ReDoS) during the parsing of dates. This flaw allows an attacker to hang a ruby application by providing a specially crafted date string. The highest threat to this vulnerability is system availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ruby: Regular expression denial of service vulnerability of Date parsing methods",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.src",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.src",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-41817"
},
{
"category": "external",
"summary": "RHBZ#2025104",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2025104"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-41817",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-41817"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-41817",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41817"
},
{
"category": "external",
"summary": "https://www.ruby-lang.org/en/news/2021/11/15/date-parsing-method-regexp-dos-cve-2021-41817/",
"url": "https://www.ruby-lang.org/en/news/2021/11/15/date-parsing-method-regexp-dos-cve-2021-41817/"
}
],
"release_date": "2021-11-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2022-02-28T19:00:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.src",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.src",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2022:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.src",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.src",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "ruby: Regular expression denial of service vulnerability of Date parsing methods"
},
{
"cve": "CVE-2021-41819",
"discovery_date": "2021-11-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2026757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Ruby. RubyGems cgi gem could allow a remote attacker to conduct spoofing attacks caused by the mishandling of security prefixes in cookie names in the CGI::Cookie.parse function. By sending a specially-crafted request, an attacker could perform cookie prefix spoofing attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ruby: Cookie prefix spoofing in CGI::Cookie.parse",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.src",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.src",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-41819"
},
{
"category": "external",
"summary": "RHBZ#2026757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2026757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-41819",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-41819"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-41819",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41819"
}
],
"release_date": "2021-11-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2022-02-28T19:00:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.src",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.src",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2022:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.src",
"7Server-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"7Server-RHSCL-3.8:rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.src",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-debuginfo-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-devel-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-doc-0:2.6.9-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-ruby-libs-0:2.6.9-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bigdecimal-0:1.4.1-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-bundler-0:1.17.2-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-did_you_mean-0:1.3.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-io-console-0:0.4.7-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-irb-0:1.0.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-json-0:2.1.0-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-minitest-0:5.11.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-net-telnet-0:0.2.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-openssl-0:2.1.2-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-power_assert-0:1.1.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.s390x",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-psych-0:3.1.0-120.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-rake-0:12.3.3-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-rdoc-0:6.1.2.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-test-unit-0:3.2.9-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygem-xmlrpc-0:0.3.0-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygems-0:3.0.3.1-120.el7.noarch",
"7Workstation-RHSCL-3.8:rh-ruby26-rubygems-devel-0:3.0.3.1-120.el7.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "ruby: Cookie prefix spoofing in CGI::Cookie.parse"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.