Red Hat Security AdvisoryRHSA-2022:0672
ruby:2.5 security update
Released 2022-02-24 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) ruby-2.5.9-109.module+el8.5.0+14275+d9c243ca.aarch64::ruby:2.5, ruby-2.5.9-109.module+el8.5.0+14275+d9c243ca.i686::ruby:2.5, ruby-2.5.9-109.module+el8.5.0+14275+d9c243ca.ppc64le::ruby:2.5 +47
Fixes 3 records
Priority LOW 38
An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.02909 · Published 2021-08-01 · Partial fix CWE-755
Priority LOW 36
In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.0148 · Published 2021-07-29 · Partial fix · 6.1.2.1, 6.2.1.1 +1 CWE-78
Priority LOW 32
An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1.
CVSS 3.1MEDIUM 5.8· Network · No auth · No interaction · EPSS 0.0305 · Published 2021-07-13 · Partial fix
