Red Hat Security Advisory

RHSA-2021:2584

ruby:2.7 security, bug fix, and enhancement update

Released 2021-06-29 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) ruby-2.7.3-136.module+el8.4.0+10728+4c884998.aarch64::ruby:2.7, ruby-2.7.3-136.module+el8.4.0+10728+4c884998.i686::ruby:2.7, ruby-2.7.3-136.module+el8.4.0+10728+4c884998.ppc64le::ruby:2.7 +47

TI-2021-09890 CVE-2021-28965 · GHSA-8cr8-4vfw-mr7h

MEDIUM 41

The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML round-trip issues.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05061 Published 2021-04-21 Partial fix · 3.2.5 CWE-115

TI-2020-15633 CVE-2020-25613 · GHSA-gwfg-cqmg-cf8f

LOW 39

An issue was discovered in Ruby through 2.5.8, 2.6.x through 2.6.6, and 2.7.x through 2.7.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03818 Published 2020-10-06 Partial fix · 1.6.1, 1.5.1 +1 CWE-444