ruby:2.5 security update

エラータID: AXSA:2024-9315:01

Release date: 
Thursday, December 12, 2024 - 21:57
Subject: 
ruby:2.5 security update
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

* rexml: REXML ReDoS vulnerability (CVE-2024-49761)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2024-49761
REXML is an XML toolkit for Ruby. The REXML gem before 3.3.9 has a ReDoS vulnerability when it parses an XML that has many digits between &# and x...; in a hex numeric character reference (&#x...;). This does not happen with Ruby 3.2 or later. Ruby 3.1 is the only affected maintained Ruby. The REXML gem 3.3.9 or later include the patch to fix the vulnerability.

Modularity name: "ruby"
Stream name: "2.5"

Solution: 

Update packages.

CVEs: 
CVE-2024-49761
REXML is an XML toolkit for Ruby. The REXML gem before 3.3.9 has a ReDoS vulnerability when it parses an XML that has many digits between &# and x...; in a hex numeric character reference (&#x...;). This does not happen with Ruby 3.2 or later. Ruby 3.1 is the only affected maintained Ruby. The REXML gem 3.3.9 or later include the patch to fix the vulnerability.
Additional Info: 

N/A

Download: 

SRPMS
  1. rubygem-abrt-0.3.0-4.module+el8+1831+81f04f23.src.rpm
    MD5: 7370e1ef50f5f6cd049441b82eacf6c4
    SHA-256: eafc6885fa4a1eb674121eb5de28638f06af346ff2cb980a0f7027cf45ea85ef
    Size: 16.02 kB
  2. rubygem-bson-4.3.0-2.module+el8+1831+81f04f23.src.rpm
    MD5: b9bf4f01f550571b96016d4c0e21d2ae
    SHA-256: 2855cf4ba84023201dc431dc86a21705fe0683f04f144f03d869eadb1f8df89f
    Size: 90.07 kB
  3. rubygem-bundler-1.16.1-4.module+el8+1831+81f04f23.src.rpm
    MD5: b3f7d4f46b5ab1179daf6f104bdb9c5e
    SHA-256: 93f8c69e5480498807b57f7bb43632bfbb94d53e020a3985c3259cb72c492d01
    Size: 14.64 MB
  4. rubygem-mongo-2.5.1-2.module+el8+1831+81f04f23.src.rpm
    MD5: 21057b4204f9322dc7a1a6da325a53cf
    SHA-256: a590abd6eaa000fd216a354521b6b426df0408dab58cce5693c5e458b57bec1e
    Size: 338.59 kB
  5. rubygem-mysql2-0.4.10-4.module+el8+1831+81f04f23.ML.1.src.rpm
    MD5: 9bad2862de2eb06ad201a81f547f2073
    SHA-256: 18d1106bf3cd687a1e8f40cd4fb3feb03209292ed37ff115999fe76b4ba3c2c8
    Size: 108.28 kB
  6. rubygem-pg-1.0.0-3.module+el8+1831+81f04f23.src.rpm
    MD5: 814325325d25e90cecca645f8ff062cb
    SHA-256: d43fd47241f0118cc06d482097add4a9743c712bcb1ad8a32e5ab2da8fada5f0
    Size: 218.84 kB
  7. ruby-2.5.9-113.module+el8+1831+81f04f23.src.rpm
    MD5: 7b83053042dc3f2ffd091cd973195db5
    SHA-256: 6b8ef4711a272f24de83ead155c65a95b326a680db4de867ddde959066b92e80
    Size: 10.97 MB

Asianux Server 8 for x86_64
  1. ruby-2.5.9-113.module+el8+1831+81f04f23.i686.rpm
    MD5: 1fef57483653a8129088f5b7817c6e72
    SHA-256: aedb1deb4c1302217eb95454e1bc73d0f7142d81206216f8eea266c06d8e9da5
    Size: 87.45 kB
  2. ruby-2.5.9-113.module+el8+1831+81f04f23.x86_64.rpm
    MD5: df0d4fe703bee6c9a59670abe658aca3
    SHA-256: d953bb48cc7afdc6a02dda90e4638c9294700218fa62d98ec879320a156f5260
    Size: 87.34 kB
  3. ruby-debugsource-2.5.9-113.module+el8+1831+81f04f23.i686.rpm
    MD5: c78839b8dd814177fbba682ca1006446
    SHA-256: 27f9db9d3914a556251944b2b320f442547415d085e3b05277ff3c84db77394c
    Size: 3.68 MB
  4. ruby-debugsource-2.5.9-113.module+el8+1831+81f04f23.x86_64.rpm
    MD5: 0fdad6b537b70b18b32a0258c621ceeb
    SHA-256: 538c47c85c2611db973560662eb24d9f1be9f436875f768cdcf11f7df972840f
    Size: 3.68 MB
  5. ruby-devel-2.5.9-113.module+el8+1831+81f04f23.i686.rpm
    MD5: 323eef4202688362a1a227785c8b5260
    SHA-256: b23e96f3a8fdb778e59a695660e8c5c61e2baaa723cf30e01b784bb736ddd967
    Size: 126.77 kB
  6. ruby-devel-2.5.9-113.module+el8+1831+81f04f23.x86_64.rpm
    MD5: 14c143862c37e85a7c34890cbd20baca
    SHA-256: 0011f3bea19d17b083001a19011da29acaacd08fa5ece57988af8876640cc2bb
    Size: 126.75 kB
  7. ruby-doc-2.5.9-113.module+el8+1831+81f04f23.noarch.rpm
    MD5: f8331e5e813e0bb21b51aa1e48d17b8d
    SHA-256: 923bc3830de1d670dc11f5657664861688017c21b30c1e65c27c550f5c1e6dd1
    Size: 5.34 MB
  8. rubygem-abrt-0.3.0-4.module+el8+1831+81f04f23.noarch.rpm
    MD5: bfd1fe5d031d8a90a07db64a1e738481
    SHA-256: 68c8bf7f9a2dd24e49a9c4884edaa2452f422e967a6485acf111c3965ad5059b
    Size: 12.49 kB
  9. rubygem-abrt-doc-0.3.0-4.module+el8+1831+81f04f23.noarch.rpm
    MD5: 23e9e396de92c94699e6c6e03d22b3f3
    SHA-256: ae963436eb557f03bf9acae0aef6760b17173dd7d47e0307df9999bdf4d6d58f
    Size: 198.15 kB
  10. rubygem-bigdecimal-1.3.4-113.module+el8+1831+81f04f23.i686.rpm
    MD5: fcca983390b991022c2fdd4e86265b6a
    SHA-256: fa9d8342b67d7d24a4a1ec747d66802e060aa96c166ea29e3d9e67753baed6af
    Size: 100.83 kB
  11. rubygem-bigdecimal-1.3.4-113.module+el8+1831+81f04f23.x86_64.rpm
    MD5: c2ff8c9b74566db42cc20e2447ed0b21
    SHA-256: b8c5bc118441465282f522db21b7f842819bdded29fd81ac379a4e1e08719c9a
    Size: 98.01 kB
  12. rubygem-bson-4.3.0-2.module+el8+1831+81f04f23.x86_64.rpm
    MD5: 0eeb5e0e515c3368bb55523e2764c2e5
    SHA-256: 69822246975cc909d912b3eb5d0d6f9cb75d8d33c911c0669501b6f3183dc860
    Size: 53.38 kB
  13. rubygem-bson-debugsource-4.3.0-2.module+el8+1831+81f04f23.x86_64.rpm
    MD5: a6d1872498becc158760a9bd7adb4cc2
    SHA-256: 6091b546e6788734b6fab911c2e7494ae2489facbadd10255e8ca4f4d49a27bd
    Size: 19.73 kB
  14. rubygem-bson-doc-4.3.0-2.module+el8+1831+81f04f23.noarch.rpm
    MD5: 521dce10940f3f6499530cb61b691e33
    SHA-256: ef9b88a2fa2c0eed417e3ce675269a9602890f9d771ba39f145e426c1536b18f
    Size: 373.78 kB
  15. rubygem-bundler-1.16.1-4.module+el8+1831+81f04f23.noarch.rpm
    MD5: 33b10a4ce90a558535e7eef5b301ef09
    SHA-256: 206de1580e8c9b22b5a856018f1b667a26ad626813b1e2a9d42b19b54a638424
    Size: 351.84 kB
  16. rubygem-bundler-doc-1.16.1-4.module+el8+1831+81f04f23.noarch.rpm
    MD5: c9a2557b34865cc70a96cc9f43c59dee
    SHA-256: 0bfcc9db29118c35bb476b15c0c47a88849d5bd7170b3e5c26cebee622fac6bf
    Size: 1.23 MB
  17. rubygem-did_you_mean-1.2.0-113.module+el8+1831+81f04f23.noarch.rpm
    MD5: 467eea4d854a8c5dceb8d4604cd3c030
    SHA-256: 21ae50e764056647910894d6226398426ef5342784ec839291084add35c0de42
    Size: 81.96 kB
  18. rubygem-io-console-0.4.6-113.module+el8+1831+81f04f23.i686.rpm
    MD5: a96f14706c568cc87cbec2c40cca5686
    SHA-256: 3337ec0de87e6a8e4fb67149373ed1fafecc4240500afad639b2af1e97a853df
    Size: 68.29 kB
  19. rubygem-io-console-0.4.6-113.module+el8+1831+81f04f23.x86_64.rpm
    MD5: a577dacda497f9961b53c6a7f09e4a7f
    SHA-256: 66b73abba312e84866694058d01b0c8dfba6543f720e35eb22b9d278cae0d95a
    Size: 67.44 kB
  20. rubygem-json-2.1.0-113.module+el8+1831+81f04f23.i686.rpm
    MD5: bb1f0fcadb3a65d3f6d3a0e41069acf9
    SHA-256: 55eb772c5ddd2416b8cdc248772163db1e4274b893fb12d3d23318c9cafa9cab
    Size: 92.62 kB
  21. rubygem-json-2.1.0-113.module+el8+1831+81f04f23.x86_64.rpm
    MD5: 5566d1c4594eb54c615da222b5c896c5
    SHA-256: 2796c6958d37a030243e916253d50864850be2125112cce4bf477114bcf7768b
    Size: 91.21 kB
  22. rubygem-minitest-5.10.3-113.module+el8+1831+81f04f23.noarch.rpm
    MD5: bbf632524cf33e95f5b8614f92a56799
    SHA-256: 27fec8d50287357863d11a2deecb9a3d95bb5f1ba72a956e62d96bdbb0e9f11a
    Size: 123.27 kB
  23. rubygem-mongo-2.5.1-2.module+el8+1831+81f04f23.noarch.rpm
    MD5: 977b60f26945b86ca6be38ee98ba73c9
    SHA-256: a6f4f5af2f87b3e4fe8888c72f5f248b0fc82ab825faeca93a028f08664f3bd0
    Size: 184.41 kB
  24. rubygem-mongo-doc-2.5.1-2.module+el8+1831+81f04f23.noarch.rpm
    MD5: 0c47da161378dfd39af106bf51646d45
    SHA-256: 9a0b8a784c896fe693dbde8abb33a5832569ec0ec07c253578b0bb4a2c590d55
    Size: 1.20 MB
  25. rubygem-mysql2-0.4.10-4.module+el8+1831+81f04f23.ML.1.x86_64.rpm
    MD5: afbde9bd9dd703baf9cfc24a3afe8e09
    SHA-256: 1a17235db8b4a71a31c5293f486a5c49f82da2f8d2db3afb7195a42db492ce27
    Size: 44.29 kB
  26. rubygem-mysql2-debugsource-0.4.10-4.module+el8+1831+81f04f23.ML.1.x86_64.rpm
    MD5: 85db9532acc1d4b3d29598b578d89fbd
    SHA-256: 85dd9c636401ed6926119768d85ed40a36007b09d124971dce1426d8be815941
    Size: 36.06 kB
  27. rubygem-mysql2-doc-0.4.10-4.module+el8+1831+81f04f23.ML.1.noarch.rpm
    MD5: 7847cb85ef7fc8dd210ee9aca0ae8c03
    SHA-256: 78805f92fe22c40762bbd400509c6dd9d716bff26341746b351dfb082f7b6db6
    Size: 275.40 kB
  28. rubygem-net-telnet-0.1.1-113.module+el8+1831+81f04f23.noarch.rpm
    MD5: f7cfac623a0e9aee2eb2a419f95f0ea2
    SHA-256: 611b2e50cdbbb366fcbb280e35cfb2a2311a62edfefb098348f93e04cd3233a6
    Size: 70.97 kB
  29. rubygem-openssl-2.1.2-113.module+el8+1831+81f04f23.i686.rpm
    MD5: 0d664c8d9917f7594f0cdc29d3965280
    SHA-256: 89f35c2e9531170f51d0fa950f67457a24f2192ca2fcdad9dd6c874d5a183702
    Size: 202.35 kB
  30. rubygem-openssl-2.1.2-113.module+el8+1831+81f04f23.x86_64.rpm
    MD5: 494e00f0a77590ae6d64e0a334df07d3
    SHA-256: 9621d888f30271e63992d6d4be9df748c20168fe9aea546bec14432db1d3046a
    Size: 190.00 kB
  31. rubygem-pg-1.0.0-3.module+el8+1831+81f04f23.x86_64.rpm
    MD5: 7a7a299082e08c47440e136931c30020
    SHA-256: f45682ec619733188de7d2bbc297a58b87c0e235e201e261f3dcad80512a90cb
    Size: 86.21 kB
  32. rubygem-pg-debugsource-1.0.0-3.module+el8+1831+81f04f23.x86_64.rpm
    MD5: d1da6169bb0ed68b0525ccac5aa8aca9
    SHA-256: 905e912660c12ad1e9b10355339e704a398200cf8cad5f43fac508c42849f6b3
    Size: 81.22 kB
  33. rubygem-pg-doc-1.0.0-3.module+el8+1831+81f04f23.noarch.rpm
    MD5: 661552e4030cef4e397047b8731c71b1
    SHA-256: 2ea157f898d452211b53cc62e04b4e84e9e1fe02ef3f6b7b5ab0202aab0219eb
    Size: 522.83 kB
  34. rubygem-power_assert-1.1.1-113.module+el8+1831+81f04f23.noarch.rpm
    MD5: 9510378c4f7e75d334e9317e1249a65b
    SHA-256: 16746c8aed106aeb61fa1d6e5d4201b8c51188698ffcecb32dd5eb4e30a6aac7
    Size: 70.05 kB
  35. rubygem-psych-3.0.2-113.module+el8+1831+81f04f23.i686.rpm
    MD5: 55b5b83c70b701a1408ecf924926341a
    SHA-256: a8fe6faada42557a61f954a77443c61f6e7f44e0ee8596796c02a75f05070b04
    Size: 97.18 kB
  36. rubygem-psych-3.0.2-113.module+el8+1831+81f04f23.x86_64.rpm
    MD5: d3cccf4cc03543224230c9c6267647c3
    SHA-256: 2da49345c45714af2675d283d26faaef6182fc1b243ce404f88e20b3aa901ed1
    Size: 95.74 kB
  37. rubygem-rake-12.3.3-113.module+el8+1831+81f04f23.noarch.rpm
    MD5: 64867bc0c8d83f5bf22782ef4f353e6a
    SHA-256: 1ee1708c28a559eec9449cee62fca66368d1ff366b155148ec59d2ed2194994b
    Size: 142.07 kB
  38. rubygem-rdoc-6.0.1.1-113.module+el8+1831+81f04f23.noarch.rpm
    MD5: 1616efdad9f02f779c016b767653154a
    SHA-256: 6b450d38c8bf69384d191ab967adba60f89803e8761c102d74c7906823b263ed
    Size: 456.73 kB
  39. rubygems-2.7.6.3-113.module+el8+1831+81f04f23.noarch.rpm
    MD5: d43115794bafebc102c740d1f4c8be8b
    SHA-256: 8b0184b2d03c0a632dc3abd8c8432827bd73d95b567649a473b628979f7102b9
    Size: 308.78 kB
  40. rubygems-devel-2.7.6.3-113.module+el8+1831+81f04f23.noarch.rpm
    MD5: a9f0edf8513adcfa92734b35287d2c5c
    SHA-256: 4062d484140cc033feac642af325ed93232a38f7c24debf7622cceb50109ec6c
    Size: 60.87 kB
  41. rubygem-test-unit-3.2.7-113.module+el8+1831+81f04f23.noarch.rpm
    MD5: 7be2d6000ab2cb8af614f5dd69a100ba
    SHA-256: 0417f6b039fd0ae0c419f626b4f40b55817ceb2647c9465ecd9f8db4640faf11
    Size: 182.86 kB
  42. rubygem-xmlrpc-0.3.0-113.module+el8+1831+81f04f23.noarch.rpm
    MD5: cc130c39d0cf33207dce44035b236ad6
    SHA-256: ec4a7edc53deac4c23bed10e70f00a5a4183669bba8e24867867bb363adff3cb
    Size: 82.55 kB
  43. ruby-irb-2.5.9-113.module+el8+1831+81f04f23.noarch.rpm
    MD5: 0dc99d4c36e5903d1c45b02b06813b36
    SHA-256: d960e5efeef886096c0398cc6fd734c98dc330a71c219c37144b3697c6b442d3
    Size: 102.83 kB
  44. ruby-libs-2.5.9-113.module+el8+1831+81f04f23.i686.rpm
    MD5: 773eac96521aa8ddc2ed1eec6c404c37
    SHA-256: bb2f79bfc959717f73f442e3b610f75f1e779227a9ef63876537939cf4e44ac8
    Size: 3.03 MB
  45. ruby-libs-2.5.9-113.module+el8+1831+81f04f23.x86_64.rpm
    MD5: dd559ecbc9c8d9cbf09c69ec597e3e7d
    SHA-256: 25fbf85a4d8169f7f1057b89f5e3e84d00c972fd6c4a35047eb1c5ae2fabea93
    Size: 2.92 MB