RHSA-2021:2584

See a problem?
Please try reporting it to the source first.

Source

https://access.redhat.com/errata/RHSA-2021:2584

Import Source

https://security.access.redhat.com/data/osv/RHSA-2021:2584.json

JSON Data

https://api.test.osv.dev/v1/vulns/RHSA-2021:2584

Upstream

CVE-2020-25613

CVE-2021-28965

Published

2024-09-13T20:27:10Z

Modified

2025-09-11T11:40:06Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator

Summary

Red Hat Security Advisory: ruby:2.7 security, bug fix, and enhancement update

Details

References

Affected packages

Red Hat:enterprise_linux:8::appstream / ruby-2.7.3

Package

Name: ruby-2.7.3
Purl: pkg:rpm/redhat/ruby

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

136.module+el8.4.0+10728+4c884998.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / ruby-debuginfo-2.7.3

Package

Name: ruby-debuginfo-2.7.3
Purl: pkg:rpm/redhat/ruby-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

136.module+el8.4.0+10728+4c884998.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / ruby-debugsource-2.7.3

Package

Name: ruby-debugsource-2.7.3
Purl: pkg:rpm/redhat/ruby-debugsource

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

136.module+el8.4.0+10728+4c884998.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / ruby-default-gems-2.7.3

Package

Name: ruby-default-gems-2.7.3
Purl: pkg:rpm/redhat/ruby-default-gems

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

136.module+el8.4.0+10728+4c884998.noarch.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / ruby-devel-2.7.3

Package

Name: ruby-devel-2.7.3
Purl: pkg:rpm/redhat/ruby-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

136.module+el8.4.0+10728+4c884998.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / ruby-doc-2.7.3

Package

Name: ruby-doc-2.7.3
Purl: pkg:rpm/redhat/ruby-doc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

136.module+el8.4.0+10728+4c884998.noarch.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / ruby-libs-2.7.3

Package

Name: ruby-libs-2.7.3
Purl: pkg:rpm/redhat/ruby-libs

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

136.module+el8.4.0+10728+4c884998.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / ruby-libs-debuginfo-2.7.3

Package

Name: ruby-libs-debuginfo-2.7.3
Purl: pkg:rpm/redhat/ruby-libs-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

136.module+el8.4.0+10728+4c884998.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-abrt-0.4.0

Package

Name: rubygem-abrt-0.4.0
Purl: pkg:rpm/redhat/rubygem-abrt

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.module+el8.3.0+7192+4e3a532a.src.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-abrt-doc-0.4.0

Package

Name: rubygem-abrt-doc-0.4.0
Purl: pkg:rpm/redhat/rubygem-abrt-doc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.module+el8.3.0+7192+4e3a532a.noarch.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-bigdecimal-2.0.0

Package

Name: rubygem-bigdecimal-2.0.0
Purl: pkg:rpm/redhat/rubygem-bigdecimal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

136.module+el8.4.0+10728+4c884998.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-bigdecimal-debuginfo-2.0.0

Package

Name: rubygem-bigdecimal-debuginfo-2.0.0
Purl: pkg:rpm/redhat/rubygem-bigdecimal-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

136.module+el8.4.0+10728+4c884998.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-bson-4.8.1

Package

Name: rubygem-bson-4.8.1
Purl: pkg:rpm/redhat/rubygem-bson

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.module+el8.3.0+7192+4e3a532a.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-bson-debuginfo-4.8.1

Package

Name: rubygem-bson-debuginfo-4.8.1
Purl: pkg:rpm/redhat/rubygem-bson-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.module+el8.3.0+7192+4e3a532a.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-bson-debugsource-4.8.1

Package

Name: rubygem-bson-debugsource-4.8.1
Purl: pkg:rpm/redhat/rubygem-bson-debugsource

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.module+el8.3.0+7192+4e3a532a.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-bson-doc-4.8.1

Package

Name: rubygem-bson-doc-4.8.1
Purl: pkg:rpm/redhat/rubygem-bson-doc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.module+el8.3.0+7192+4e3a532a.noarch.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-bundler-2.1.4

Package

Name: rubygem-bundler-2.1.4
Purl: pkg:rpm/redhat/rubygem-bundler

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

136.module+el8.4.0+10728+4c884998.noarch.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-io-console-0.5.6

Package

Name: rubygem-io-console-0.5.6
Purl: pkg:rpm/redhat/rubygem-io-console

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

136.module+el8.4.0+10728+4c884998.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-io-console-debuginfo-0.5.6

Package

Name: rubygem-io-console-debuginfo-0.5.6
Purl: pkg:rpm/redhat/rubygem-io-console-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

136.module+el8.4.0+10728+4c884998.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-irb-1.2.6

Package

Name: rubygem-irb-1.2.6
Purl: pkg:rpm/redhat/rubygem-irb

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

136.module+el8.4.0+10728+4c884998.noarch.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-json-2.3.0

Package

Name: rubygem-json-2.3.0
Purl: pkg:rpm/redhat/rubygem-json

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

136.module+el8.4.0+10728+4c884998.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-json-debuginfo-2.3.0

Package

Name: rubygem-json-debuginfo-2.3.0
Purl: pkg:rpm/redhat/rubygem-json-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

136.module+el8.4.0+10728+4c884998.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-minitest-5.13.0

Package

Name: rubygem-minitest-5.13.0
Purl: pkg:rpm/redhat/rubygem-minitest

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

136.module+el8.4.0+10728+4c884998.noarch.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-mongo-2.11.3

Package

Name: rubygem-mongo-2.11.3
Purl: pkg:rpm/redhat/rubygem-mongo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.module+el8.3.0+7192+4e3a532a.src.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-mongo-doc-2.11.3

Package

Name: rubygem-mongo-doc-2.11.3
Purl: pkg:rpm/redhat/rubygem-mongo-doc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.module+el8.3.0+7192+4e3a532a.noarch.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-mysql2-0.5.3

Package

Name: rubygem-mysql2-0.5.3
Purl: pkg:rpm/redhat/rubygem-mysql2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.module+el8.3.0+7192+4e3a532a.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-mysql2-debuginfo-0.5.3

Package

Name: rubygem-mysql2-debuginfo-0.5.3
Purl: pkg:rpm/redhat/rubygem-mysql2-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.module+el8.3.0+7192+4e3a532a.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-mysql2-debugsource-0.5.3

Package

Name: rubygem-mysql2-debugsource-0.5.3
Purl: pkg:rpm/redhat/rubygem-mysql2-debugsource

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.module+el8.3.0+7192+4e3a532a.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-mysql2-doc-0.5.3

Package

Name: rubygem-mysql2-doc-0.5.3
Purl: pkg:rpm/redhat/rubygem-mysql2-doc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.module+el8.3.0+7192+4e3a532a.noarch.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-net-telnet-0.2.0

Package

Name: rubygem-net-telnet-0.2.0
Purl: pkg:rpm/redhat/rubygem-net-telnet

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

136.module+el8.4.0+10728+4c884998.noarch.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-openssl-2.1.2

Package

Name: rubygem-openssl-2.1.2
Purl: pkg:rpm/redhat/rubygem-openssl

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

136.module+el8.4.0+10728+4c884998.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-openssl-debuginfo-2.1.2

Package

Name: rubygem-openssl-debuginfo-2.1.2
Purl: pkg:rpm/redhat/rubygem-openssl-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

136.module+el8.4.0+10728+4c884998.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-pg-1.2.3

Package

Name: rubygem-pg-1.2.3
Purl: pkg:rpm/redhat/rubygem-pg

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.module+el8.3.0+7192+4e3a532a.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-pg-debuginfo-1.2.3

Package

Name: rubygem-pg-debuginfo-1.2.3
Purl: pkg:rpm/redhat/rubygem-pg-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.module+el8.3.0+7192+4e3a532a.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-pg-debugsource-1.2.3

Package

Name: rubygem-pg-debugsource-1.2.3
Purl: pkg:rpm/redhat/rubygem-pg-debugsource

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.module+el8.3.0+7192+4e3a532a.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-pg-doc-1.2.3

Package

Name: rubygem-pg-doc-1.2.3
Purl: pkg:rpm/redhat/rubygem-pg-doc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.module+el8.3.0+7192+4e3a532a.noarch.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-power_assert-1.1.7

Package

Name: rubygem-power_assert-1.1.7
Purl: pkg:rpm/redhat/rubygem-power_assert

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

136.module+el8.4.0+10728+4c884998.noarch.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-psych-3.1.0

Package

Name: rubygem-psych-3.1.0
Purl: pkg:rpm/redhat/rubygem-psych

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

136.module+el8.4.0+10728+4c884998.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-psych-debuginfo-3.1.0

Package

Name: rubygem-psych-debuginfo-3.1.0
Purl: pkg:rpm/redhat/rubygem-psych-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

136.module+el8.4.0+10728+4c884998.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-rake-13.0.1

Package

Name: rubygem-rake-13.0.1
Purl: pkg:rpm/redhat/rubygem-rake

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

136.module+el8.4.0+10728+4c884998.noarch.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-rdoc-6.2.1

Package

Name: rubygem-rdoc-6.2.1
Purl: pkg:rpm/redhat/rubygem-rdoc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

136.module+el8.4.0+10728+4c884998.noarch.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-test-unit-3.3.4

Package

Name: rubygem-test-unit-3.3.4
Purl: pkg:rpm/redhat/rubygem-test-unit

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

136.module+el8.4.0+10728+4c884998.noarch.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-xmlrpc-0.3.0

Package

Name: rubygem-xmlrpc-0.3.0
Purl: pkg:rpm/redhat/rubygem-xmlrpc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

136.module+el8.4.0+10728+4c884998.noarch.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygems-3.1.6

Package

Name: rubygems-3.1.6
Purl: pkg:rpm/redhat/rubygems

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

136.module+el8.4.0+10728+4c884998.noarch.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygems-devel-3.1.6

Package

Name: rubygems-devel-3.1.6
Purl: pkg:rpm/redhat/rubygems-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

136.module+el8.4.0+10728+4c884998.noarch.rpm-ruby:2