FEDORA-2021-36cdab1f8d — security update for ruby

stable

ruby-3.0.2-149.fc34

FEDORA-2021-36cdab1f8d created by jackorp 2 years ago for Fedora 34

Security fix for CVE-2020-36327 CVE-2021-31799 CVE-2021-31810 CVE-2021-32066

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2021-36cdab1f8d

This update has been submitted for testing by jackorp.

2 years ago

This update's test gating status has been changed to 'ignored'.

2 years ago

This update's test gating status has been changed to 'waiting'.

2 years ago

This update's test gating status has been changed to 'ignored'.

2 years ago

This update has been pushed to testing.

2 years ago

This update has been submitted for stable by bodhi.

2 years ago

This update has been pushed to stable.

2 years ago

Please login to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

ruby-3.0.2-149.fc34

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

2 years ago

in testing

2 years ago

in stable

2 years ago

BZ#1958999 CVE-2020-36327 rubygem-bundler: Dependencies of gems with explicit source may be installed from a different source

BZ#1960172 CVE-2020-36327 ruby: rubygem-bundler: Dependencies of gems with explicit source may be installed from a different source [fedora-all]

BZ#1980126 CVE-2021-31810 ruby: FTP PASV command response can cause Net::FTP to connect to arbitrary host

BZ#1980128 CVE-2021-32066 ruby: StartTLS stripping vulnerability in Net::IMAP

BZ#1980132 CVE-2021-31799 rubygem-rdoc: Command injection vulnerability in RDoc

BZ#1980570 CVE-2021-31799 CVE-2021-31810 CVE-2021-32066 ruby: various flaws [fedora-all]

ruby-3.0.2-149.fc34

Automated Test Results

ignored