Summary
ruby
[2.7.3-136]
- Upgrade to Ruby 2.7.3.
Resolves: rhbz#1951999
- Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
contains leading zero
Resolves: rhbz#1952000
[2.7.2-135]
- Upgrade to Ruby 2.7.2.
- Avoid possible timeout errors in TestBugReporter#test_bug_reporter_add.
[2.7.1-133]
- Fix behavior allowing to load libraries multiple times.
Resolves: rhbz#1842989
- Add ruby-default-gems dependency on irb.
Fixed packages 31
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | ruby | 0:2.7.3-136.module+el8.4.0+20239+cbf59dc8 |
| Oracle Linux · 8 | ruby-default-gems | 0:2.7.3-136.module+el8.4.0+20239+cbf59dc8 |
| Oracle Linux · 8 | ruby-devel | 0:2.7.3-136.module+el8.4.0+20239+cbf59dc8 |
| Oracle Linux · 8 | ruby-doc | 0:2.7.3-136.module+el8.4.0+20239+cbf59dc8 |
| Oracle Linux · 8 | ruby-libs | 0:2.7.3-136.module+el8.4.0+20239+cbf59dc8 |
| Oracle Linux · 8 | rubygem-abrt | 0:0.4.0-1.module+el8.3.0+7760+537395ec |
| Oracle Linux · 8 | rubygem-abrt-doc | 0:0.4.0-1.module+el8.3.0+7760+537395ec |
| Oracle Linux · 8 | rubygem-bigdecimal | 0:2.0.0-136.module+el8.4.0+20239+cbf59dc8 |
| Oracle Linux · 8 | rubygem-bson | 0:4.8.1-1.module+el8.4.0+20239+cbf59dc8 |
| Oracle Linux · 8 | rubygem-bson-doc | 0:4.8.1-1.module+el8.4.0+20239+cbf59dc8 |
| Oracle Linux · 8 | rubygem-bundler | 0:2.1.4-136.module+el8.4.0+20239+cbf59dc8 |
| Oracle Linux · 8 | rubygem-io-console | 0:0.5.6-136.module+el8.4.0+20239+cbf59dc8 |
| Oracle Linux · 8 | rubygem-irb | 0:1.2.6-136.module+el8.4.0+20239+cbf59dc8 |
| Oracle Linux · 8 | rubygem-json | 0:2.3.0-136.module+el8.4.0+20239+cbf59dc8 |
| Oracle Linux · 8 | rubygem-minitest | 0:5.13.0-136.module+el8.4.0+20239+cbf59dc8 |
| Oracle Linux · 8 | rubygem-mongo | 0:2.11.3-1.module+el8.3.0+7760+537395ec |
| Oracle Linux · 8 | rubygem-mongo-doc | 0:2.11.3-1.module+el8.3.0+7760+537395ec |
| Oracle Linux · 8 | rubygem-mysql2 | 0:0.5.3-1.module+el8.4.0+20239+cbf59dc8 |
| Oracle Linux · 8 | rubygem-mysql2-doc | 0:0.5.3-1.module+el8.4.0+20239+cbf59dc8 |
| Oracle Linux · 8 | rubygem-net-telnet | 0:0.2.0-136.module+el8.4.0+20239+cbf59dc8 |
| Oracle Linux · 8 | rubygem-openssl | 0:2.1.2-136.module+el8.4.0+20239+cbf59dc8 |
| Oracle Linux · 8 | rubygem-pg | 0:1.2.3-1.module+el8.4.0+20239+cbf59dc8 |
| Oracle Linux · 8 | rubygem-pg-doc | 0:1.2.3-1.module+el8.4.0+20239+cbf59dc8 |
| Oracle Linux · 8 | rubygem-power_assert | 0:1.1.7-136.module+el8.4.0+20239+cbf59dc8 |
| Oracle Linux · 8 | rubygem-psych | 0:3.1.0-136.module+el8.4.0+20239+cbf59dc8 |
| Oracle Linux · 8 | rubygem-rake | 0:13.0.1-136.module+el8.4.0+20239+cbf59dc8 |
| Oracle Linux · 8 | rubygem-rdoc | 0:6.2.1-136.module+el8.4.0+20239+cbf59dc8 |
| Oracle Linux · 8 | rubygem-test-unit | 0:3.3.4-136.module+el8.4.0+20239+cbf59dc8 |
| Oracle Linux · 8 | rubygem-xmlrpc | 0:0.3.0-136.module+el8.4.0+20239+cbf59dc8 |
| Oracle Linux · 8 | rubygems | 0:3.1.6-136.module+el8.4.0+20239+cbf59dc8 |
| Oracle Linux · 8 | rubygems-devel | 0:3.1.6-136.module+el8.4.0+20239+cbf59dc8 |
Vulnerabilities 2
-
High 7.5CVE-2020-25613 Public exploit
WEBRick vulnerable to HTTP Request/Response Smuggling
An issue was discovered in Ruby through 2.5.8, 2.6.x through 2.6.6, and 2.7.x through 2.7.1. WEBrick, a simple HTTP server bundled with Ruby, had not checked the transfer-encoding header value rigorously. An attacker may potentially exploit this issue to bypa…
-
High 7.5
REXML round-trip instability
The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML round-trip issues. An incorrect document can be produced after parsing and serializing.