ruby:2.6 security, bug fix, and enhancement update

エラータID: AXSA:2022-3745:01

リリース日: 
2022/08/29 Monday - 04:12
題名: 
ruby:2.6 security, bug fix, and enhancement update
影響のあるチャネル: 
Asianux Server 8 for x86_64
Severity: 
Moderate
Description: 

以下項目について対処しました。

[Security Fix]
- ruby の Kernel#Float メソッドと String#to_f メソッドには、
バッファオーバーリードの問題があるため、String 型から
Float 側への変換を介してクラッシュによるサービス拒否攻撃
などを可能とする脆弱性が存在します。(CVE-2022-28739)

Modularity name: ruby
Stream name: 2.6

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2022-28739
There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before 3.1.2. It occurs in String-to-Float conversion, including Kernel#Float and String#to_f.
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. rubygem-abrt-0.3.0-4.module+el8+1498+27c281d7.src.rpm
    MD5: 55d052580200a72bea5c8f2c5c0aee05
    SHA-256: 193349e0ab66e49f66a78955780cc4040e18130d25c44fab7e5f23ff2253e85c
    Size: 16.03 kB
  2. rubygem-bson-4.5.0-1.module+el8+1498+27c281d7.src.rpm
    MD5: 78f7b414587cafa407f0443b866d4646
    SHA-256: b6c664267fbbef09e2f0f19957a9809f43b3fb77c7df6f37e67930a6d1f1c9b7
    Size: 92.83 kB
  3. rubygem-mongo-2.8.0-1.module+el8+1498+27c281d7.src.rpm
    MD5: c95c63dbff2236564f94dc2f647d2b0b
    SHA-256: a2dd897a330d3430344f7e24b310d05f71fd96ee977921faae0b897fe4210b82
    Size: 509.33 kB
  4. rubygem-mysql2-0.5.2-1.module+el8+1498+27c281d7.src.rpm
    MD5: 221299eec9792e968cdf9ed76a776943
    SHA-256: 7c517e3e5d3ef869c9dd46e0964531d7bd7daec2be1e17075f805e5e1a5718bd
    Size: 107.02 kB
  5. rubygem-pg-1.1.4-1.module+el8+1498+27c281d7.src.rpm
    MD5: 2679e4d7c429c8d437b63739a80bb193
    SHA-256: 13959891b561f51d9b2e2a3d041dbcb9ef0c1480eb2ccfdcd50b26e691f1a85f
    Size: 237.23 kB
  6. ruby-2.6.10-109.module+el8+1498+27c281d7.ML.1.src.rpm
    MD5: fa41014a49ee48b55a482289e7d0f785
    SHA-256: 72d2b1f7a17dd9d40f6d503f022b70aa9c75f96f3577c1e92ab1cdb155429f4d
    Size: 11.16 MB

Asianux Server 8 for x86_64
  1. rubygem-abrt-0.3.0-4.module+el8+1498+27c281d7.noarch.rpm
    MD5: 6c25b2850c405119f63b120520f54b41
    SHA-256: a3d58b6f613c97adef4d9b82fe9ff69649955a82cf0edd7e3b0da03d9b56c1ac
    Size: 12.48 kB
  2. rubygem-abrt-doc-0.3.0-4.module+el8+1498+27c281d7.noarch.rpm
    MD5: 3df71c7bf557e47e6b59f8099e7eb769
    SHA-256: 187d4b93a43762d4da6eaf137b5a3c6255ceff57b733cf9d74c044ce1210a960
    Size: 198.01 kB
  3. rubygem-bson-4.5.0-1.module+el8+1498+27c281d7.x86_64.rpm
    MD5: 6189a24b5f4da314852883d480af9c96
    SHA-256: e4f2f6986c18545ecb4496c72651b4c4a98df8aa02cb6671fe71129b170297b1
    Size: 54.94 kB
  4. rubygem-bson-debugsource-4.5.0-1.module+el8+1498+27c281d7.x86_64.rpm
    MD5: 1fdd0392d2c0d35444a30565e5c5dcad
    SHA-256: 21e9098bf4444d674ba443ef1fff39092e4966f4af052e2290793deab2726038
    Size: 20.33 kB
  5. rubygem-bson-doc-4.5.0-1.module+el8+1498+27c281d7.noarch.rpm
    MD5: a127e858dc414e3a6997106b615817e0
    SHA-256: cd83fb31f8223444ef7aa9e381097e1775e91cfc92e0f78d9d533610102cb7bb
    Size: 378.69 kB
  6. rubygem-mongo-2.8.0-1.module+el8+1498+27c281d7.noarch.rpm
    MD5: 97b6e17e56abb5a1e730ccfd1de5c9be
    SHA-256: 46b0e6b8bbdbb2474f5091ef32cf355d687411aa938f91df1ba696e4b9297779
    Size: 262.12 kB
  7. rubygem-mongo-doc-2.8.0-1.module+el8+1498+27c281d7.noarch.rpm
    MD5: 422731ae8316e76b9921b51a8d8f62e2
    SHA-256: f9000502ca6f9ba58b380143653799faa8fed69bebf7a5c5ed89d3a2ae195dda
    Size: 1.42 MB
  8. rubygem-mysql2-0.5.2-1.module+el8+1498+27c281d7.x86_64.rpm
    MD5: c19994ac2b485d6b7b6fff40135901d9
    SHA-256: d6941e52cc8fba11141b74b49fd61be9fe56053baefd359b489f9a0376b4f19f
    Size: 45.72 kB
  9. rubygem-mysql2-debugsource-0.5.2-1.module+el8+1498+27c281d7.x86_64.rpm
    MD5: e0170ecd69179c8c9430e5a0019e6be4
    SHA-256: c685cd729f5ea92e86c2043cb2b56cab052fddfe1fb4c71b970401ebbb6e435d
    Size: 36.30 kB
  10. rubygem-mysql2-doc-0.5.2-1.module+el8+1498+27c281d7.noarch.rpm
    MD5: d4f5994d5cf845fe1b1fff45a3ee9058
    SHA-256: 1499a9ab281370c52084fa9535f33ec858fd2a6fe8b7edb0e5b4462b165985e2
    Size: 274.25 kB
  11. rubygem-pg-1.1.4-1.module+el8+1498+27c281d7.x86_64.rpm
    MD5: abd3ad869be67b32e9bb161a60021a88
    SHA-256: 89842cfc7dfde6074ddfd7e69ab9f13c698cd6464cb8f822082725aa4004254c
    Size: 95.98 kB
  12. rubygem-pg-debugsource-1.1.4-1.module+el8+1498+27c281d7.x86_64.rpm
    MD5: bafb29e9b04cd3b5ac3c7c97481f9c91
    SHA-256: c8d71e3d3344914d2a95afca163f53e9594b01a7efd6a6cee741094bd671b50f
    Size: 91.65 kB
  13. rubygem-pg-doc-1.1.4-1.module+el8+1498+27c281d7.noarch.rpm
    MD5: 91228d9f9a13f78281b2ef77f15f0a9a
    SHA-256: 14bf04143d531bf19fbdb0c9e9d16cc54f4ba31dcff632feb226b386e662feea
    Size: 549.98 kB
  14. ruby-2.6.10-109.module+el8+1498+27c281d7.ML.1.x86_64.rpm
    MD5: fa1c103025b1ed39a2e9c7e3b7c2a40c
    SHA-256: e41cd7afd67c06350d3702585b278db963e7f1565329ab8c0bb433f6dac80413
    Size: 86.76 kB
  15. ruby-debugsource-2.6.10-109.module+el8+1498+27c281d7.ML.1.x86_64.rpm
    MD5: 62f59ef49dccc58b269fdc8123bd8c6b
    SHA-256: 82ada659ae094b7ca7c16ce2dbec4a1fb41bd5e2d4f36c1ffcdf0a061b54ffb6
    Size: 3.82 MB
  16. ruby-devel-2.6.10-109.module+el8+1498+27c281d7.ML.1.x86_64.rpm
    MD5: 23d2df0cea31a4884b003564d19decd3
    SHA-256: 88b66f1c2974794caea542900d78925029fe8958cf495b90b84146b29711e5ac
    Size: 242.98 kB
  17. ruby-doc-2.6.10-109.module+el8+1498+27c281d7.ML.1.noarch.rpm
    MD5: fca9e4f62d1ac012ee9a1c3fed23a03e
    SHA-256: 3ebcf5db774e917091954000fefaae3dc05f867e3cd3fcb81eef09b847c09da6
    Size: 6.02 MB
  18. rubygem-bigdecimal-1.4.1-109.module+el8+1498+27c281d7.ML.1.x86_64.rpm
    MD5: d697afa366cc7518dc55acd8a17ff70c
    SHA-256: ebeb4deb61f58122ca3740ccd2d62ea3fa9685298fbebba1d2b9d002a3761722
    Size: 100.27 kB
  19. rubygem-bundler-1.17.2-109.module+el8+1498+27c281d7.ML.1.noarch.rpm
    MD5: 1e79e6ba81fa9cfd3bcc6c61a123e9e1
    SHA-256: 428df6c561fe867b60f56148f89f299bca73c72b4b5885c172cbf1df0c846dcd
    Size: 355.26 kB
  20. rubygem-did_you_mean-1.3.0-109.module+el8+1498+27c281d7.ML.1.noarch.rpm
    MD5: 1c0c9f8c05eb3499fc74b6f3b712f1d4
    SHA-256: 13a500bfe747936d8d0c38c1c1407be8d4153a121d2b84fbb5c5c40ecf1c620b
    Size: 81.95 kB
  21. rubygem-io-console-0.4.7-109.module+el8+1498+27c281d7.ML.1.x86_64.rpm
    MD5: 8237a4f275ab1e2bccd8ff78af8a2424
    SHA-256: 4c0d0b59564268421f4861e60d32db726cd86c2e830bc43921fb7566e552a8e2
    Size: 66.74 kB
  22. rubygem-irb-1.0.0-109.module+el8+1498+27c281d7.ML.1.noarch.rpm
    MD5: c87f7aa34f0f80dc05a5257bca346c91
    SHA-256: a710a4bb1a994092150fa2d14c356162f178418cb2c3c39a25619128e24ef5cd
    Size: 110.74 kB
  23. rubygem-json-2.1.0-109.module+el8+1498+27c281d7.ML.1.x86_64.rpm
    MD5: 798bff9b548e2455dd8e63b5dc32301c
    SHA-256: df4ba02094561a95497293bca27437516bfd5deb8ad1fa175bebcb4bf22dc0d3
    Size: 90.08 kB
  24. rubygem-minitest-5.11.3-109.module+el8+1498+27c281d7.ML.1.noarch.rpm
    MD5: c47e6ffcf3e5bcaab38eca7d5676a95e
    SHA-256: 85944273413a0ce1f91aab82dd1677b4e01686685b3a5516175d11b69c8424e5
    Size: 124.98 kB
  25. rubygem-net-telnet-0.2.0-109.module+el8+1498+27c281d7.ML.1.noarch.rpm
    MD5: d41c68290ab68ecf09981dae35106283
    SHA-256: 048846b79c3827a85951e7c0b3181803291154bdf760b64e463a7144580d30ca
    Size: 70.19 kB
  26. rubygem-openssl-2.1.2-109.module+el8+1498+27c281d7.ML.1.x86_64.rpm
    MD5: e5f20929cc5057daa0295fe464fe1bd7
    SHA-256: 8c52bbdd823762593549e08b7f4cb322ccc07b5c2d05f32c0009604e2f87f1ea
    Size: 189.36 kB
  27. rubygem-power_assert-1.1.3-109.module+el8+1498+27c281d7.ML.1.noarch.rpm
    MD5: c9490fd40ea68f42f89a65170bb88005
    SHA-256: ed9ddf7091da2ba4eaf82afe9d8c6abb070ad7563a840d1686b2bbdd729a0feb
    Size: 69.47 kB
  28. rubygem-psych-3.1.0-109.module+el8+1498+27c281d7.ML.1.x86_64.rpm
    MD5: f16205bde48cfa56cdc608952109052e
    SHA-256: 77331c88773aecc5a5e4d1094ec8e489cbe4f46f5a529f750418f624e7bd0b91
    Size: 95.58 kB
  29. rubygem-rake-12.3.3-109.module+el8+1498+27c281d7.ML.1.noarch.rpm
    MD5: 61ed2019805b936c88394931e6d36b4c
    SHA-256: aa3128dcd43a10a208b232334df0dad2e50f0c8f3dac291c8c7527def2fd9fbf
    Size: 141.18 kB
  30. rubygem-rdoc-6.1.2.1-109.module+el8+1498+27c281d7.ML.1.noarch.rpm
    MD5: 91747e0bf19e8d810e8d5b90c45ced74
    SHA-256: 2b824869fd50cbac1d3a82c5cc4437604aa3c60fe0d4a2b43ffd57fdb711f7ae
    Size: 455.67 kB
  31. rubygems-3.0.3.1-109.module+el8+1498+27c281d7.ML.1.noarch.rpm
    MD5: 21ef4dadef7a0be0060d3b32307bc0f7
    SHA-256: e448e26381816268b90d94e8c8e3845413a11e8c22193105435d60afa94bf460
    Size: 314.88 kB
  32. rubygems-devel-3.0.3.1-109.module+el8+1498+27c281d7.ML.1.noarch.rpm
    MD5: 37905e61abf9df24908d90043c4f958c
    SHA-256: 94a6facf465ca89aab199dc99253d749231c7900702e55e58a359144bed6a4bf
    Size: 60.07 kB
  33. rubygem-test-unit-3.2.9-109.module+el8+1498+27c281d7.ML.1.noarch.rpm
    MD5: c006fea956c98e8879c776548ef71cfd
    SHA-256: e4d39454bf099d87a90f0cf76e3326e8db0001ed3b3a4a8442d129b5cdb591ba
    Size: 184.21 kB
  34. rubygem-xmlrpc-0.3.0-109.module+el8+1498+27c281d7.ML.1.noarch.rpm
    MD5: e8796b2c7bdd266eb2e3683c67e5c99b
    SHA-256: 66e63736bd3e69bfe78c787fef20ada1ab4e3042ea1d31ce3ab6ba043ab739c1
    Size: 81.69 kB
  35. ruby-libs-2.6.10-109.module+el8+1498+27c281d7.ML.1.x86_64.rpm
    MD5: 58cfb7e00d1f02392b1ab9651f4321b3
    SHA-256: 3b2597f391dec4a55260a03942792fab29712a33b3f622750ecfc18fc1d0cdb6
    Size: 3.03 MB
  36. ruby-2.6.10-109.module+el8+1498+27c281d7.ML.1.i686.rpm
    MD5: 17197ec85a5dfc7e471dbf6d66b4ed48
    SHA-256: e46cc22475eea32bfbf36a4ab645623353451e1fdf1c6c81a5faba6064cfbed0
    Size: 86.87 kB
  37. ruby-debugsource-2.6.10-109.module+el8+1498+27c281d7.ML.1.i686.rpm
    MD5: d176550878364d4b66c26d8f14eb7935
    SHA-256: b59363c6dc5b1ce430a3485ea577142a15d1c10381d420773ac68ae1075f08ef
    Size: 3.82 MB
  38. ruby-devel-2.6.10-109.module+el8+1498+27c281d7.ML.1.i686.rpm
    MD5: 23512c7e177e4c7cad0e5abd08f65666
    SHA-256: 72109b8a9998065517d177f943fed1b97ae24f92bc6322e795bbc9e99e01541a
    Size: 242.54 kB
  39. rubygem-bigdecimal-1.4.1-109.module+el8+1498+27c281d7.ML.1.i686.rpm
    MD5: 50e805c6b216b9fadbf48c5e28b49a7c
    SHA-256: bbd199f1accf91b017758d785ac1a0ea8da83b83c8bad7a137c966a623416563
    Size: 103.61 kB
  40. rubygem-io-console-0.4.7-109.module+el8+1498+27c281d7.ML.1.i686.rpm
    MD5: 03f8dbe7839077d4bee24e8b5d811229
    SHA-256: e479b67b2c2a45fb1395d779bd860b62450312e15cb5544d6259bb74fb764786
    Size: 67.62 kB
  41. rubygem-json-2.1.0-109.module+el8+1498+27c281d7.ML.1.i686.rpm
    MD5: b20bb74798acff3108cf94ea2d89d09b
    SHA-256: 8b143b1f79824eeb44f03f1401dd258bca71e0cf52b7bc50727ca9e410b42c3e
    Size: 91.61 kB
  42. rubygem-openssl-2.1.2-109.module+el8+1498+27c281d7.ML.1.i686.rpm
    MD5: 374324ed4453520a0bbab4f06a8d0426
    SHA-256: c5959a2185566776a58d28e846d93e8c11044548a6e1d91a755adcdbc8782211
    Size: 201.37 kB
  43. rubygem-psych-3.1.0-109.module+el8+1498+27c281d7.ML.1.i686.rpm
    MD5: e56594e83efb76b2c9afaa73c79df464
    SHA-256: 349b7f00ee9c59d0410de4478ee5158710b0f02f8572e455902fda83505cb5ed
    Size: 96.95 kB
  44. ruby-libs-2.6.10-109.module+el8+1498+27c281d7.ML.1.i686.rpm
    MD5: b6be92b2e9464fc15c3863aa639bdb8f
    SHA-256: 22e721690dd7a65655fc250cadc42e8bf1c9caedd6a8091f227b2ff2f933d446
    Size: 3.15 MB