Red Hat Security AdvisoryRHSA-2021:2229
rh-ruby27-ruby security, bug fix, and enhancement update
Released 2021-06-03 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-ruby27-ruby-2.7.3-129.el7, rh-ruby27-ruby-devel-2.7.3-129.el7, rh-ruby27-ruby-doc-2.7.3-129.el7 +19
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7) rh-ruby27-ruby-2.7.3-129.el7, rh-ruby27-ruby-devel-2.7.3-129.el7, rh-ruby27-ruby-doc-2.7.3-129.el7 +19
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-ruby27-ruby-2.7.3-129.el7, rh-ruby27-ruby-devel-2.7.3-129.el7, rh-ruby27-ruby-doc-2.7.3-129.el7 +19
Fixes 2 records
Priority MEDIUM 41
The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML round-trip issues.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.05061 · Published 2021-04-21 · Partial fix · 3.2.5 CWE-115
Priority LOW 39
An issue was discovered in Ruby through 2.5.8, 2.6.x through 2.6.6, and 2.7.x through 2.7.1.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03818 · Published 2020-10-06 · Partial fix · 1.6.1, 1.5.1 +1 CWE-444
