RHSA-2022:0672

See a problem?
Please try reporting it to the source first.

Source

https://access.redhat.com/errata/RHSA-2022:0672

Import Source

https://security.access.redhat.com/data/osv/RHSA-2022:0672.json

JSON Data

https://api.test.osv.dev/v1/vulns/RHSA-2022:0672

Upstream

CVE-2021-31799

CVE-2021-31810

CVE-2021-32066

Published

2024-09-13T20:33:37Z

Modified

2025-09-11T11:48:36Z

Severity

7.4 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVSS Calculator

Summary

Red Hat Security Advisory: ruby:2.5 security update

Details

References

Affected packages

Red Hat:enterprise_linux:8::appstream / ruby-2.5.9

Package

Name: ruby-2.5.9
Purl: pkg:rpm/redhat/ruby

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

109.module+el8.5.0+14275+d9c243ca.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / ruby-debuginfo-2.5.9

Package

Name: ruby-debuginfo-2.5.9
Purl: pkg:rpm/redhat/ruby-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

109.module+el8.5.0+14275+d9c243ca.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / ruby-debugsource-2.5.9

Package

Name: ruby-debugsource-2.5.9
Purl: pkg:rpm/redhat/ruby-debugsource

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

109.module+el8.5.0+14275+d9c243ca.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / ruby-devel-2.5.9

Package

Name: ruby-devel-2.5.9
Purl: pkg:rpm/redhat/ruby-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

109.module+el8.5.0+14275+d9c243ca.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / ruby-doc-2.5.9

Package

Name: ruby-doc-2.5.9
Purl: pkg:rpm/redhat/ruby-doc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

109.module+el8.5.0+14275+d9c243ca.noarch.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / ruby-irb-2.5.9

Package

Name: ruby-irb-2.5.9
Purl: pkg:rpm/redhat/ruby-irb

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

109.module+el8.5.0+14275+d9c243ca.noarch.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / ruby-libs-2.5.9

Package

Name: ruby-libs-2.5.9
Purl: pkg:rpm/redhat/ruby-libs

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

109.module+el8.5.0+14275+d9c243ca.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / ruby-libs-debuginfo-2.5.9

Package

Name: ruby-libs-debuginfo-2.5.9
Purl: pkg:rpm/redhat/ruby-libs-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

109.module+el8.5.0+14275+d9c243ca.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-abrt-0.3.0

Package

Name: rubygem-abrt-0.3.0
Purl: pkg:rpm/redhat/rubygem-abrt

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.module+el8.1.0+3656+f80bfa1d.src.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-abrt-doc-0.3.0

Package

Name: rubygem-abrt-doc-0.3.0
Purl: pkg:rpm/redhat/rubygem-abrt-doc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.module+el8.1.0+3656+f80bfa1d.noarch.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-bigdecimal-1.3.4

Package

Name: rubygem-bigdecimal-1.3.4
Purl: pkg:rpm/redhat/rubygem-bigdecimal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

109.module+el8.5.0+14275+d9c243ca.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-bigdecimal-debuginfo-1.3.4

Package

Name: rubygem-bigdecimal-debuginfo-1.3.4
Purl: pkg:rpm/redhat/rubygem-bigdecimal-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

109.module+el8.5.0+14275+d9c243ca.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-bson-4.3.0

Package

Name: rubygem-bson-4.3.0
Purl: pkg:rpm/redhat/rubygem-bson

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.module+el8.1.0+3656+f80bfa1d.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-bson-debuginfo-4.3.0

Package

Name: rubygem-bson-debuginfo-4.3.0
Purl: pkg:rpm/redhat/rubygem-bson-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.module+el8.1.0+3656+f80bfa1d.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-bson-debugsource-4.3.0

Package

Name: rubygem-bson-debugsource-4.3.0
Purl: pkg:rpm/redhat/rubygem-bson-debugsource

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.module+el8.1.0+3656+f80bfa1d.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-bson-doc-4.3.0

Package

Name: rubygem-bson-doc-4.3.0
Purl: pkg:rpm/redhat/rubygem-bson-doc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.module+el8.1.0+3656+f80bfa1d.noarch.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-bundler-1.16.1

Package

Name: rubygem-bundler-1.16.1
Purl: pkg:rpm/redhat/rubygem-bundler

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.module+el8.5.0+13840+ec418553.src.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-bundler-doc-1.16.1

Package

Name: rubygem-bundler-doc-1.16.1
Purl: pkg:rpm/redhat/rubygem-bundler-doc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.module+el8.5.0+13840+ec418553.noarch.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-did_you_mean-1.2.0

Package

Name: rubygem-did_you_mean-1.2.0
Purl: pkg:rpm/redhat/rubygem-did_you_mean

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

109.module+el8.5.0+14275+d9c243ca.noarch.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-io-console-0.4.6

Package

Name: rubygem-io-console-0.4.6
Purl: pkg:rpm/redhat/rubygem-io-console

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

109.module+el8.5.0+14275+d9c243ca.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-io-console-debuginfo-0.4.6

Package

Name: rubygem-io-console-debuginfo-0.4.6
Purl: pkg:rpm/redhat/rubygem-io-console-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

109.module+el8.5.0+14275+d9c243ca.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-json-2.1.0

Package

Name: rubygem-json-2.1.0
Purl: pkg:rpm/redhat/rubygem-json

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

109.module+el8.5.0+14275+d9c243ca.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-json-debuginfo-2.1.0

Package

Name: rubygem-json-debuginfo-2.1.0
Purl: pkg:rpm/redhat/rubygem-json-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

109.module+el8.5.0+14275+d9c243ca.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-minitest-5.10.3

Package

Name: rubygem-minitest-5.10.3
Purl: pkg:rpm/redhat/rubygem-minitest

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

109.module+el8.5.0+14275+d9c243ca.noarch.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-mongo-2.5.1

Package

Name: rubygem-mongo-2.5.1
Purl: pkg:rpm/redhat/rubygem-mongo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.module+el8.1.0+3656+f80bfa1d.src.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-mongo-doc-2.5.1

Package

Name: rubygem-mongo-doc-2.5.1
Purl: pkg:rpm/redhat/rubygem-mongo-doc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.module+el8.1.0+3656+f80bfa1d.noarch.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-mysql2-0.4.10

Package

Name: rubygem-mysql2-0.4.10
Purl: pkg:rpm/redhat/rubygem-mysql2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.module+el8.1.0+3656+f80bfa1d.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-mysql2-debuginfo-0.4.10

Package

Name: rubygem-mysql2-debuginfo-0.4.10
Purl: pkg:rpm/redhat/rubygem-mysql2-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.module+el8.1.0+3656+f80bfa1d.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-mysql2-debugsource-0.4.10

Package

Name: rubygem-mysql2-debugsource-0.4.10
Purl: pkg:rpm/redhat/rubygem-mysql2-debugsource

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.module+el8.1.0+3656+f80bfa1d.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-mysql2-doc-0.4.10

Package

Name: rubygem-mysql2-doc-0.4.10
Purl: pkg:rpm/redhat/rubygem-mysql2-doc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.module+el8.1.0+3656+f80bfa1d.noarch.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-net-telnet-0.1.1

Package

Name: rubygem-net-telnet-0.1.1
Purl: pkg:rpm/redhat/rubygem-net-telnet

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

109.module+el8.5.0+14275+d9c243ca.noarch.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-openssl-2.1.2

Package

Name: rubygem-openssl-2.1.2
Purl: pkg:rpm/redhat/rubygem-openssl

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

109.module+el8.5.0+14275+d9c243ca.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-openssl-debuginfo-2.1.2

Package

Name: rubygem-openssl-debuginfo-2.1.2
Purl: pkg:rpm/redhat/rubygem-openssl-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

109.module+el8.5.0+14275+d9c243ca.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-pg-1.0.0

Package

Name: rubygem-pg-1.0.0
Purl: pkg:rpm/redhat/rubygem-pg

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.module+el8.1.0+3656+f80bfa1d.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-pg-debuginfo-1.0.0

Package

Name: rubygem-pg-debuginfo-1.0.0
Purl: pkg:rpm/redhat/rubygem-pg-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.module+el8.1.0+3656+f80bfa1d.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-pg-debugsource-1.0.0

Package

Name: rubygem-pg-debugsource-1.0.0
Purl: pkg:rpm/redhat/rubygem-pg-debugsource

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.module+el8.1.0+3656+f80bfa1d.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-pg-doc-1.0.0

Package

Name: rubygem-pg-doc-1.0.0
Purl: pkg:rpm/redhat/rubygem-pg-doc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.module+el8.1.0+3656+f80bfa1d.noarch.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-power_assert-1.1.1

Package

Name: rubygem-power_assert-1.1.1
Purl: pkg:rpm/redhat/rubygem-power_assert

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

109.module+el8.5.0+14275+d9c243ca.noarch.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-psych-3.0.2

Package

Name: rubygem-psych-3.0.2
Purl: pkg:rpm/redhat/rubygem-psych

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

109.module+el8.5.0+14275+d9c243ca.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-psych-debuginfo-3.0.2

Package

Name: rubygem-psych-debuginfo-3.0.2
Purl: pkg:rpm/redhat/rubygem-psych-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

109.module+el8.5.0+14275+d9c243ca.x86_64.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-rake-12.3.3

Package

Name: rubygem-rake-12.3.3
Purl: pkg:rpm/redhat/rubygem-rake

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

109.module+el8.5.0+14275+d9c243ca.noarch.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-rdoc-6.0.1.1

Package

Name: rubygem-rdoc-6.0.1.1
Purl: pkg:rpm/redhat/rubygem-rdoc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

109.module+el8.5.0+14275+d9c243ca.noarch.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-test-unit-3.2.7

Package

Name: rubygem-test-unit-3.2.7
Purl: pkg:rpm/redhat/rubygem-test-unit

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

109.module+el8.5.0+14275+d9c243ca.noarch.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygem-xmlrpc-0.3.0

Package

Name: rubygem-xmlrpc-0.3.0
Purl: pkg:rpm/redhat/rubygem-xmlrpc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

109.module+el8.5.0+14275+d9c243ca.noarch.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygems-2.7.6.3

Package

Name: rubygems-2.7.6.3
Purl: pkg:rpm/redhat/rubygems

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

109.module+el8.5.0+14275+d9c243ca.noarch.rpm-ruby:2

Red Hat:enterprise_linux:8::appstream / rubygems-devel-2.7.6.3

Package

Name: rubygems-devel-2.7.6.3
Purl: pkg:rpm/redhat/rubygems-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

109.module+el8.5.0+14275+d9c243ca.noarch.rpm-ruby:2