ruby:2.5 security update

エラータID: AXSA:2022-3066:01

リリース日: 
2022/02/17 Thursday - 12:10
題名: 
ruby:2.5 security update
影響のあるチャネル: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

以下項目について対処しました。

[Security Fix]
- Bundler には最も高い gem のバージョン番号に基づいて依存関係のソースを選択する
問題があり、この問題により、たとえ意図した選択がアプリケーションによって
明示的に依存されている別のプライベートなgemの依存関係にあるプライベ ートな
gem であったとしても、パブリックなソース上で発見された不正な gem が選択される
脆弱性があります。 (CVE-2020-36327)

Modularity name: ruby
Stream name: 2.5

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2020-36327
Bundler 1.16.0 through 2.2.9 and 2.2.11 through 2.2.16 sometimes chooses a dependency source based on the highest gem version number, which means that a rogue gem found at a public source may be chosen, even if the intended choice was a private gem that is a dependency of another private gem that is explicitly depended on by the application. NOTE: it is not correct to use CVE-2021-24105 for every "Dependency Confusion" issue in every product.
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. rubygem-abrt-0.3.0-4.module+el8+1397+41b17957.src.rpm
    MD5: 13a9f497856f49cc27ac936d590070f4
    SHA-256: c497418dd2a398c332cc99504895a3df50875b6e4e3eb5fdb1909164c458c247
    Size: 16.03 kB
  2. rubygem-bson-4.3.0-2.module+el8+1397+41b17957.src.rpm
    MD5: 88ca2a4a256dc49e1f44d3bef7671186
    SHA-256: 2e483010165786c0eb66accb13fe44f79a7aeb8347ba0cb0aaea05450c63c66a
    Size: 90.08 kB
  3. rubygem-bundler-1.16.1-4.module+el8+1397+41b17957.src.rpm
    MD5: 73324b41c5b2e8e93a8399ea3d03d49a
    SHA-256: 9add2daae8972795648da7f77402b0a568bd55bfdfc8bb9e0a472913a4524de5
    Size: 14.64 MB
  4. rubygem-mongo-2.5.1-2.module+el8+1397+41b17957.src.rpm
    MD5: 8d2307164bb0c09286df4f2287e96cf7
    SHA-256: be2e8c03e53e3bbeea64623815c14a450ec8c275912aa1d8a97525d8bd02e238
    Size: 338.58 kB
  5. rubygem-mysql2-0.4.10-4.module+el8+1397+41b17957.src.rpm
    MD5: 083af7cfc8876fc777eed2abb55b06cb
    SHA-256: b6d9084b1ff377b5cf7f3f9cad36249517a04ce9da3d8ddd69d900cbd0889717
    Size: 108.16 kB
  6. rubygem-pg-1.0.0-2.0.1.module+el8+1397+41b17957.src.rpm
    MD5: 1e4cae41602d2f2892f5900de7a76571
    SHA-256: c055813fa8de6ab830792731246bdd99d7ae44e7c293d2a86eb73337ee4eb88d
    Size: 218.64 kB
  7. ruby-2.5.9-107.module+el8+1397+41b17957.src.rpm
    MD5: 36adef04f6c6485f58f18921c954e69c
    SHA-256: 1860235809f9752f8a44cce7a1c9de2437b8cf4ae9f7e0a335d8c5e19fb2f292
    Size: 10.91 MB

Asianux Server 8 for x86_64
  1. rubygem-abrt-0.3.0-4.module+el8+1397+41b17957.noarch.rpm
    MD5: e82febea16b5c4ad3febd38af2b8fd75
    SHA-256: 5019c2d6c176bc5711cc0f4333cc84cf66ae57ff752aa5228dcadb212a76b9c8
    Size: 12.49 kB
  2. rubygem-abrt-doc-0.3.0-4.module+el8+1397+41b17957.noarch.rpm
    MD5: 6dfe097259d66a755bac1b4bed0475c8
    SHA-256: 01de4d4022a73a727691d35b944b85714867299dc745d21da55f2d61e4fd7836
    Size: 198.15 kB
  3. rubygem-bson-4.3.0-2.module+el8+1397+41b17957.x86_64.rpm
    MD5: 688bb67dd3944450ae13f2ca96ea3fb9
    SHA-256: 64f144670651a80b9489a35d9df8986c56c7d30242b8d8aa4be9b9493a885ad1
    Size: 53.37 kB
  4. rubygem-bson-debugsource-4.3.0-2.module+el8+1397+41b17957.x86_64.rpm
    MD5: 6969a5eb9ff830973dbe289942b7b997
    SHA-256: 26a60346001eab8fe4bfa1b7cf3fbfe259d0f176099cc6d1c064aaff8c74084c
    Size: 19.73 kB
  5. rubygem-bson-doc-4.3.0-2.module+el8+1397+41b17957.noarch.rpm
    MD5: 428b8e2b78fb55cabed9d576db9579da
    SHA-256: d3b4f3a000710612da856a063fdd75c6ae35507f23a30cb0e5bbe4b6d238fd02
    Size: 373.78 kB
  6. rubygem-bundler-1.16.1-4.module+el8+1397+41b17957.noarch.rpm
    MD5: 4ad3d0c35d358523d8d184a8e0bc9655
    SHA-256: e27d85bf2cc68a94990a7531c3afcb9fbe6434d12a14c538d31a8e9ec2001b67
    Size: 351.83 kB
  7. rubygem-bundler-doc-1.16.1-4.module+el8+1397+41b17957.noarch.rpm
    MD5: d7ed910cf6e4fe33292790edc726a95e
    SHA-256: 2ce93f634268438f8e46eb6d7a5bafea62889f56949103caf2132474de3b0769
    Size: 1.23 MB
  8. rubygem-mongo-2.5.1-2.module+el8+1397+41b17957.noarch.rpm
    MD5: 81237896feddf730db4f032913ec85c9
    SHA-256: 347847834bafcdde09de54b72863ddeaae64562a9ce0fba8fcbcce07ed7fbaba
    Size: 184.40 kB
  9. rubygem-mongo-doc-2.5.1-2.module+el8+1397+41b17957.noarch.rpm
    MD5: 3b634c6469b5c1ebb6e2efefb15a8e52
    SHA-256: d645e634672f78b4948f2f8c402556f5d388b155859195858a3d1cf238edf535
    Size: 1.20 MB
  10. rubygem-mysql2-0.4.10-4.module+el8+1397+41b17957.x86_64.rpm
    MD5: db31daa63843f1d2b94f6537c74da445
    SHA-256: 4117b6bc1834cb330320bd068c94c596105cd96c2da066dca586d9542da2867d
    Size: 44.14 kB
  11. rubygem-mysql2-debugsource-0.4.10-4.module+el8+1397+41b17957.x86_64.rpm
    MD5: e16dc4a66dd79ceec090920749ceafaa
    SHA-256: fb606a96a24276e5239cd647eca726bb0316ee1d515a87bfa152544b37ef2a15
    Size: 35.86 kB
  12. rubygem-mysql2-doc-0.4.10-4.module+el8+1397+41b17957.noarch.rpm
    MD5: 38afeaceded900fe69c53ee7b41d5bcd
    SHA-256: 7523d2f9acd6ad5238e0636ea62e9d8b665619300ef3905344b6d88ad9f72216
    Size: 275.24 kB
  13. rubygem-pg-1.0.0-2.0.1.module+el8+1397+41b17957.x86_64.rpm
    MD5: 0387c4b77fd779673bf9b08c369e9e4f
    SHA-256: 2f65bf09099edb627fb7b9bab0bfc6f4df2147eb037282a556c5f6b524af49a3
    Size: 86.21 kB
  14. rubygem-pg-debugsource-1.0.0-2.0.1.module+el8+1397+41b17957.x86_64.rpm
    MD5: 4b22e3552c6a92020d637eb391057c5d
    SHA-256: caeb83448c4bfd468091944ce4c1337bf79a374ee12ae0e7385572a6a3f59b9b
    Size: 81.29 kB
  15. rubygem-pg-doc-1.0.0-2.0.1.module+el8+1397+41b17957.noarch.rpm
    MD5: b9f1f4f38568435903cb5ea788d1f1fc
    SHA-256: 2fc83e39eabe6d4f773d6b8a8396d29c51f148a9f6cba634a664df483dd1ca79
    Size: 522.84 kB
  16. ruby-2.5.9-107.module+el8+1397+41b17957.x86_64.rpm
    MD5: 456fcfed6fae73f72162414b380fa7fd
    SHA-256: 0344b122a3e547af7564b34dcdf7685a36813a0bf4edc351fb055b0505447244
    Size: 85.42 kB
  17. ruby-debugsource-2.5.9-107.module+el8+1397+41b17957.x86_64.rpm
    MD5: 9670ce89b27388772f49c141c798af18
    SHA-256: 163e6d08ceefe1576bae3674ee4572986499ba9d7b52c4e8a3a564fd58ec73de
    Size: 3.68 MB
  18. ruby-devel-2.5.9-107.module+el8+1397+41b17957.x86_64.rpm
    MD5: 81a9e2300a07b9eb7750f213cc22a8bb
    SHA-256: 237ccd10c19d4b33a9784418921db60678f32b9d774b9b10c6fae3f9bce9dac7
    Size: 124.83 kB
  19. ruby-doc-2.5.9-107.module+el8+1397+41b17957.noarch.rpm
    MD5: fef57b898a8231a0f361547bff97f1be
    SHA-256: 67bf4d5a16a15218493a7060ac750f9cc0dd347d340293630ef3ad70f1826826
    Size: 5.33 MB
  20. ruby-irb-2.5.9-107.module+el8+1397+41b17957.noarch.rpm
    MD5: ce6d7f869b665f8e7662750cbc298950
    SHA-256: f9e18614d4614ab92386fa2422523b8549f80ca5ea757c034ea9441cb49071db
    Size: 100.91 kB
  21. ruby-libs-2.5.9-107.module+el8+1397+41b17957.x86_64.rpm
    MD5: c7e133c22437374b83180bb3f72503b5
    SHA-256: 0e9a1c921721a791a4309b8acd28b126f9ec92296e5e2777d440831bd70313ed
    Size: 2.92 MB
  22. rubygem-bigdecimal-1.3.4-107.module+el8+1397+41b17957.x86_64.rpm
    MD5: 3da796eab2ff919c236a943a3167b674
    SHA-256: ed194de4f04881929cda13be664d329c4403d015bb0f13210f5f0c74a4b5aae5
    Size: 96.07 kB
  23. rubygem-did_you_mean-1.2.0-107.module+el8+1397+41b17957.noarch.rpm
    MD5: aaf8f1f03f2e7fd6129dfbdb792b998c
    SHA-256: 53791beaab6cad6c0350e31779c521b43bc4b4f09d52ea1d33c2156db8302f8f
    Size: 80.05 kB
  24. rubygem-io-console-0.4.6-107.module+el8+1397+41b17957.x86_64.rpm
    MD5: 67013df31acc33cf3c833cd1eb61e6bf
    SHA-256: 02b960630752814934e9ccd25046f77d3e9046fc803ac5db9a36fc115aa7a7e0
    Size: 65.52 kB
  25. rubygem-json-2.1.0-107.module+el8+1397+41b17957.x86_64.rpm
    MD5: 98f1227f2c74813e8187ce329b86c977
    SHA-256: f77b47b2c3016d9f7fac299552af86e224ab3618eb445fde30019de6d9724248
    Size: 89.34 kB
  26. rubygem-minitest-5.10.3-107.module+el8+1397+41b17957.noarch.rpm
    MD5: 9a00480194608d342aede30f1ad82312
    SHA-256: 4153b903578a93ea6434018e6ce693ead1ff09a3b27760913c8dbd3e1fb4b2be
    Size: 121.35 kB
  27. rubygem-net-telnet-0.1.1-107.module+el8+1397+41b17957.noarch.rpm
    MD5: e3cb5d30bcd1a18d65f172272e195d5c
    SHA-256: 62f5c8395ecdf23a06ddcc6155575996688813fcb997c2d369557fc0f7905ae0
    Size: 69.06 kB
  28. rubygem-openssl-2.1.2-107.module+el8+1397+41b17957.x86_64.rpm
    MD5: af59dd07fb5f270c1d61ccb02687a09c
    SHA-256: 16c42db79570e7ef18adbe029b15b0a8583809ce4a9ada8a98d4af3c1b5aa87c
    Size: 188.15 kB
  29. rubygem-power_assert-1.1.1-107.module+el8+1397+41b17957.noarch.rpm
    MD5: 522c9287b3c8981e017d1011e749f178
    SHA-256: 7a00dd016480339539acbad15e17b98c391f1384d4150e8f9cf4973231c44651
    Size: 68.14 kB
  30. rubygem-psych-3.0.2-107.module+el8+1397+41b17957.x86_64.rpm
    MD5: fbc971de9df904d56f43755cfb612214
    SHA-256: 9a621e0c3a226992c64d837528a8224fb583bbee85e5c24ce8ecf897f8e76b9c
    Size: 93.90 kB
  31. rubygem-rake-12.3.3-107.module+el8+1397+41b17957.noarch.rpm
    MD5: 5280095c8238013bdabd0474eba3ebf7
    SHA-256: 8b634efa6f34c4bfe3e31224acf8fb56a1c1989b84295ee5d4a587012c01d004
    Size: 140.15 kB
  32. rubygem-rdoc-6.0.1.1-107.module+el8+1397+41b17957.noarch.rpm
    MD5: 21039d00a51936509bb87e8b256a115f
    SHA-256: d535f8d137a96382f9be0554b466f73a39181b6f7e55dbe144b8e3160903b9d2
    Size: 454.47 kB
  33. rubygem-test-unit-3.2.7-107.module+el8+1397+41b17957.noarch.rpm
    MD5: cb2108cede1ec346e8707cfd1347bb49
    SHA-256: be0cb57f77bb58f4d4518857cd21a2935412130ad606735eb50750f9b04e883d
    Size: 180.95 kB
  34. rubygem-xmlrpc-0.3.0-107.module+el8+1397+41b17957.noarch.rpm
    MD5: c26b2baa5ccd9b2fdea071ad0383c36e
    SHA-256: 6ba1427205d581467010c0d6215027fa1cc4d30995a5d75ca463f01f67cbdb1d
    Size: 80.63 kB
  35. rubygems-2.7.6.3-107.module+el8+1397+41b17957.noarch.rpm
    MD5: 808831866e45cf081d67dc9ac15c85c0
    SHA-256: 8b9f62f0369bd88d519489ab84c636badb65c697e94578a392f8cfbce3d2cf3e
    Size: 306.87 kB
  36. rubygems-devel-2.7.6.3-107.module+el8+1397+41b17957.noarch.rpm
    MD5: 0a01e72a72da4873e553cdac0a9dde87
    SHA-256: 68d3053d810b9a97d395c68d23772834ac34a7e3ebc60d6d06805033c6e30750
    Size: 58.96 kB
  37. ruby-2.5.9-107.module+el8+1397+41b17957.i686.rpm
    MD5: a5679294a8bae134dde751be1765153e
    SHA-256: bad917648ab6b70110cde50085a155a53597b1f009f2392681d0383a226d4aae
    Size: 85.52 kB
  38. ruby-debugsource-2.5.9-107.module+el8+1397+41b17957.i686.rpm
    MD5: 175ed2bb131994f6368e0f74d715b569
    SHA-256: c0d4e7e80a15174cca6e3d7c09bc254590d992586f977c49c64e957db285276d
    Size: 3.67 MB
  39. ruby-devel-2.5.9-107.module+el8+1397+41b17957.i686.rpm
    MD5: 5a7dffc247e22819346982c5da03a266
    SHA-256: 79e73cb6dcb492501b8e374999990380c032e5c01cd145259bf68e0162b000b7
    Size: 124.85 kB
  40. ruby-libs-2.5.9-107.module+el8+1397+41b17957.i686.rpm
    MD5: e3ceb30e260f7975f12e80294fb3bd76
    SHA-256: c11625309c2a87b40cc34cd7c6d79d3210d534e5842b0782d6683e4388c9d504
    Size: 3.03 MB
  41. rubygem-bigdecimal-1.3.4-107.module+el8+1397+41b17957.i686.rpm
    MD5: 5402d9674bbcf2ca23efab1e5757ba71
    SHA-256: 44e61698b27e2b7626ae3b5a55890c875930ad173a7177798c7426873a41c086
    Size: 98.94 kB
  42. rubygem-io-console-0.4.6-107.module+el8+1397+41b17957.i686.rpm
    MD5: 16b6437dcd73bad4ccb27dacfad52ad9
    SHA-256: 9c419a1877fa51defbe0a20d38f01170bb3fc8428dc0a93a9c7791543cdda238
    Size: 66.46 kB
  43. rubygem-json-2.1.0-107.module+el8+1397+41b17957.i686.rpm
    MD5: 1e89a5cf0269a976c767f4f7a78b5ce1
    SHA-256: 7368a8dcb3dc816b5f0a5cfcc7f9a2506f6b94e541e3e2f4da27cc533be23558
    Size: 90.63 kB
  44. rubygem-openssl-2.1.2-107.module+el8+1397+41b17957.i686.rpm
    MD5: d179a94a7d4717b4c3b23be146d2411c
    SHA-256: 47a964ff178d6fb470ad768a8744d678b353dc13e03df857d9cb142d6eb7d444
    Size: 200.41 kB
  45. rubygem-psych-3.0.2-107.module+el8+1397+41b17957.i686.rpm
    MD5: 06fbe0c916e38604c7de881c4d0c7e92
    SHA-256: 6d3053010daa1d590e8d63d01aa05738512049e2f6b767cd069cbf8d847e9766
    Size: 95.15 kB