Summary
ruby
[4.0.6-34]
- Upgrade to Ruby 4.0.6.
Resolves: RHEL-211301
Resolves: RHEL-193663
rubygem-mysql2
[0.5.7-1]
- Upgrade to mysql2 0.5.7.
Related: RHEL-142278
[0.5.5-3]
- Disable tests on the 32bit platforms ix86.
Related: RHEL-80222
[0.5.5-2]
- Adapt tests to openssl 3.2
Resolves: RHEL-80222
rubygem-pg
[1.6.3-1]
- Upgrade to pg 1.6.3
Related: RHEL-142278
Fixed packages 28
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | ruby | 0:4.0.6-34.module+el9.8.0+90985+4aa8aa3b |
| Oracle Linux · 9 | ruby-bundled-gems | 0:4.0.6-34.module+el9.8.0+90985+4aa8aa3b |
| Oracle Linux · 9 | ruby-default-gems | 0:4.0.6-34.module+el9.8.0+90985+4aa8aa3b |
| Oracle Linux · 9 | ruby-devel | 0:4.0.6-34.module+el9.8.0+90985+4aa8aa3b |
| Oracle Linux · 9 | ruby-doc | 0:4.0.6-34.module+el9.8.0+90985+4aa8aa3b |
| Oracle Linux · 9 | ruby-libs | 0:4.0.6-34.module+el9.8.0+90985+4aa8aa3b |
| Oracle Linux · 9 | rubygem-bigdecimal | 0:4.0.1-34.module+el9.8.0+90985+4aa8aa3b |
| Oracle Linux · 9 | rubygem-bundler | 0:4.0.16-34.module+el9.8.0+90985+4aa8aa3b |
| Oracle Linux · 9 | rubygem-io-console | 0:0.8.2-34.module+el9.8.0+90985+4aa8aa3b |
| Oracle Linux · 9 | rubygem-irb | 0:1.16.0-34.module+el9.8.0+90985+4aa8aa3b |
| Oracle Linux · 9 | rubygem-json | 0:2.18.0-34.module+el9.8.0+90985+4aa8aa3b |
| Oracle Linux · 9 | rubygem-minitest | 0:6.0.0-34.module+el9.8.0+90985+4aa8aa3b |
| Oracle Linux · 9 | rubygem-mysql2 | 0:0.5.7-1.module+el9.8.0+90938+383082f5 |
| Oracle Linux · 9 | rubygem-mysql2-doc | 0:0.5.7-1.module+el9.8.0+90938+383082f5 |
| Oracle Linux · 9 | rubygem-pg | 0:1.6.3-1.module+el9.8.0+90938+383082f5 |
| Oracle Linux · 9 | rubygem-pg-doc | 0:1.6.3-1.module+el9.8.0+90938+383082f5 |
| Oracle Linux · 9 | rubygem-power_assert | 0:3.0.1-34.module+el9.8.0+90985+4aa8aa3b |
| Oracle Linux · 9 | rubygem-psych | 0:5.3.1-34.module+el9.8.0+90985+4aa8aa3b |
| Oracle Linux · 9 | rubygem-racc | 0:1.8.1-34.module+el9.8.0+90985+4aa8aa3b |
| Oracle Linux · 9 | rubygem-rake | 0:13.3.1-34.module+el9.8.0+90985+4aa8aa3b |
| Oracle Linux · 9 | rubygem-rbs | 0:3.10.0-34.module+el9.8.0+90985+4aa8aa3b |
| Oracle Linux · 9 | rubygem-rdoc | 0:7.0.4-34.module+el9.8.0+90985+4aa8aa3b |
| Oracle Linux · 9 | rubygem-rexml | 0:3.4.4-34.module+el9.8.0+90985+4aa8aa3b |
| Oracle Linux · 9 | rubygem-rss | 0:0.3.2-34.module+el9.8.0+90985+4aa8aa3b |
| Oracle Linux · 9 | rubygem-test-unit | 0:3.7.5-34.module+el9.8.0+90985+4aa8aa3b |
| Oracle Linux · 9 | rubygem-typeprof | 0:0.31.1-34.module+el9.8.0+90985+4aa8aa3b |
| Oracle Linux · 9 | rubygems | 0:4.0.16-34.module+el9.8.0+90985+4aa8aa3b |
| Oracle Linux · 9 | rubygems-devel | 0:4.0.16-34.module+el9.8.0+90985+4aa8aa3b |
Vulnerabilities 6
-
Medium 6.0
net-imap: Denial of service via high iteration count for `SCRAM-*` authentication
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. From versions 0.4.0 to before 0.4.24, 0.5.0 to before 0.5.14, and 0.6.0 to before 0.6.4, when authenticating a connection with SCRAM-SHA1 or SCRAM-SHA256, a hostile ser…
-
Medium 5.8
net-imap: Command Injection via "raw" arguments to multiple commands
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, several Net::IMAP commands accept a raw string argument that is sent to the server without validation or escaping. If this …
-
Medium 5.8
Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to 0.6.5 and 0.5.15, several Net::IMAP commands accept a "raw data" argument that is sent verbatim after validation to prevent command injection. However, if a se…
-
Medium 5.8
Net::IMAP: Command Injection via ID command argument
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to 0.6.5 and 0.5.15, when Net::IMAP#id is called with a hash argument, although the ID field value strings are correctly quoted (escaping quoted specials), they w…
-
Low 2.1
Net::IMAP: Denial of Service via incomplete raw argument validation
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to 0.6.5 and 0.5.15, several Net::IMAP commands accept a raw string argument which is only validated to prevent CRLF injection and then sent verbatim. If this str…
-
Low 1.7
zlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption
zlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3.1.0, 3.1.1, 3.2.0 and 3.2.1 contain a buffer overflow vulnerability in the Zlib::GzipReader. The zstream_buffer_ungets function prepends caller-provided bytes…