Red Hat Security Advisory: rh-ruby30-ruby security, bug fix, and enhancement update

Fixed packages 22

Vulnerabilities 5

• Critical 9.8
  CVE-2021-41816

  Buffer overrun in CGI.escape_html

  CGI.escape_html in Ruby before 2.7.5 and 3.x before 3.0.3 has an integer overflow and resultant buffer overflow via a long string on platforms (such as Windows) where size_t and long have different numbers of bytes. This also affects the CGI gem before 0.3.1 …

  ruby ruby2.7 ruby3.0 ruby2.7 Debian Ubuntu Alpine RubyGems
  Feb 6, 2022
• High 7.5
  CVE-2021-41817

  Regular expression denial of service vulnerability (ReDoS) in date

  Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1.

  ruby2.3 ruby ruby2.5 ruby2.7 Debian Ubuntu Azure Linux Alpine RubyGems
  Jan 1, 2022
• High 7.5
  CVE-2021-41819

  Cookie Prefix Spoofing in CGI::Cookie.parse

  CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem through 0.3.0 for Ruby.

  ruby2.3 ruby ruby2.5 ruby2.7 Debian Ubuntu Azure Linux Alpine RubyGems
  Jan 1, 2022
• Unscored —
  CVE-2022-28738

  A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to…

  ruby ruby3.0 Ubuntu Alpine
  May 9, 2022
• Unscored —
  CVE-2022-28739

  There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before 3.1.2. It occ…

  ruby2.3 ruby ruby2.5 ruby2.7 Debian Ubuntu Alpine
  May 9, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2025104
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2026752
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2026757
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2075685
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2075687
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2128628
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2128629
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6855.json
• report
  https://access.redhat.com/security/cve/CVE-2021-41816
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-41816
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-41816
• report
  https://access.redhat.com/security/cve/CVE-2021-41817
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-41817
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-41817
• article
  https://www.ruby-lang.org/en/news/2021/11/15/date-parsing-method-regexp-dos-cve-2021-41817/
• report
  https://access.redhat.com/security/cve/CVE-2021-41819
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-41819
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-41819
• report
  https://access.redhat.com/security/cve/CVE-2022-28738
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-28738
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-28738
• article
  http://www.ruby-lang.org/en/news/2022/04/12/double-free-in-regexp-compilation-cve-2022-28738/
• report
  https://access.redhat.com/security/cve/CVE-2022-28739
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-28739
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-28739
• article
  http://www.ruby-lang.org/en/news/2022/04/12/buffer-overrun-in-string-to-float-cve-2022-28739/