ruby:3.1 security update

エラータID: AXSA:2024-9395:01

リリース日: 
2024/12/17 Tuesday - 10:05
題名: 
ruby:3.1 security update
影響のあるチャネル: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

以下項目について対処しました。

[Security Fix]
- REXML には、リモートの攻撃者により、16 進数値の参照文字
である "&#" と "x...;" の間に多数の数字が含まれるように
細工された XML 形式のデータの解析を介して、正規表現サービス
拒否攻撃を可能とする脆弱性が存在します。(CVE-2024-49761)

Modularity name: ruby
Stream name: 3.1

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2024-49761
REXML is an XML toolkit for Ruby. The REXML gem before 3.3.9 has a ReDoS vulnerability when it parses an XML that has many digits between &# and x...; in a hex numeric character reference (&#x...;). This does not happen with Ruby 3.2 or later. Ruby 3.1 is the only affected maintained Ruby. The REXML gem 3.3.9 or later include the patch to fix the vulnerability.
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. rubygem-abrt-0.4.0-1.module+el8+1830+be0430a8.src.rpm
    MD5: af08b13e3d9013f3356030a53529d60a
    SHA-256: 1500af29a1e623b1af54bd1b4508d6bda23d11f958cd09fdda7ddf790157de89
    Size: 16.60 kB
  2. rubygem-mysql2-0.5.3-3.module+el8+1830+be0430a8.src.rpm
    MD5: 00ec37a4db27e3593231801620ebf6ce
    SHA-256: 143567f1f1f9a2595aefdb3b534cde7cd5c81bde10f9394b1c13239c45e85078
    Size: 112.27 kB
  3. rubygem-pg-1.3.2-1.module+el8+1830+be0430a8.src.rpm
    MD5: cf8d0858f66ef6ea05598684abcc215b
    SHA-256: cd9025637a37ecb3979359518af4cb70ca8ec4a35568024284f34437573361e2
    Size: 263.15 kB
  4. ruby-3.1.5-144.module+el8+1830+be0430a8.src.rpm
    MD5: 65e1c823a5cfab9039ad3c48cb6de934
    SHA-256: 06eab1fe40f32e5d16970202d0a2f8228a35b9672f0c6ba14d33708d8326ecad
    Size: 14.71 MB

Asianux Server 8 for x86_64
  1. ruby-3.1.5-144.module+el8+1830+be0430a8.i686.rpm
    MD5: 57369d7b34fef386c2a20cd0c6e06324
    SHA-256: b84e92d3fd195f3d4d666a86b0eee9ff9f5f8989ce4dba2a2635e7fe84c17cff
    Size: 89.15 kB
  2. ruby-3.1.5-144.module+el8+1830+be0430a8.x86_64.rpm
    MD5: 0adf62eafed3981985428bbd802388ab
    SHA-256: 46ca4329cc1514f324d6df1cf5e45e63848321e333afa4065d7f5c9c5cb240e1
    Size: 89.07 kB
  3. ruby-bundled-gems-3.1.5-144.module+el8+1830+be0430a8.i686.rpm
    MD5: 904816c085f8fefe6d5b4950ee7708ae
    SHA-256: c1fb4fbdb883d55e9ca2da1f495fd29189299e25a4d2d7202a388cb6755562e2
    Size: 224.21 kB
  4. ruby-bundled-gems-3.1.5-144.module+el8+1830+be0430a8.x86_64.rpm
    MD5: ecb46c1bd548ad8efaad0f7d9aa4c4c3
    SHA-256: a535cb401e96983e64c63b0dd0dff4c6d00a32e76625cb3c02368e3b9feabc95
    Size: 223.88 kB
  5. ruby-debugsource-3.1.5-144.module+el8+1830+be0430a8.i686.rpm
    MD5: f39d97acc455ec2fc751b9ee237021bd
    SHA-256: 321cdd3fee2233e99635c134a9904c22c5644f1676f239c74b2342e7fbb1c12c
    Size: 4.40 MB
  6. ruby-debugsource-3.1.5-144.module+el8+1830+be0430a8.x86_64.rpm
    MD5: f143a815e8dfaee8ec75b006db2e1f57
    SHA-256: f8941f82e572abc28eb012cbc8acfd322afb711a50f1616d8d02761f375dd450
    Size: 4.48 MB
  7. ruby-default-gems-3.1.5-144.module+el8+1830+be0430a8.noarch.rpm
    MD5: d7a432edecf5f6c041446be5b0f61dc7
    SHA-256: 9b6122a0c56a817771b1122b8a07c5073e7da1b78607640178391e7f7fff3520
    Size: 78.55 kB
  8. ruby-devel-3.1.5-144.module+el8+1830+be0430a8.i686.rpm
    MD5: 8e6a92c0cc0124793fa5c3b04e6649c9
    SHA-256: 64c832e7e6e9caac985524144f3adb4ec90eb2024763b1b57ff6333f8647987b
    Size: 511.87 kB
  9. ruby-devel-3.1.5-144.module+el8+1830+be0430a8.x86_64.rpm
    MD5: d5703009b7dc9ad7b831aca57a91ea3c
    SHA-256: 5436c8c64f3c25bc22a4097ddb275cc00cfd4f9788edc8838e0223642a9d3636
    Size: 511.85 kB
  10. ruby-doc-3.1.5-144.module+el8+1830+be0430a8.noarch.rpm
    MD5: b07ee2edda5bbe375d9ab4a8272d746b
    SHA-256: 1f89ef3a5f98e486df2d2dc4426abc354f9d0f899e495a7f1e265c411cdfbe4d
    Size: 5.54 MB
  11. rubygem-abrt-0.4.0-1.module+el8+1830+be0430a8.noarch.rpm
    MD5: 063340f80b3a82fab0a106be528e692f
    SHA-256: 2e7cd570371d9396bce8233ab5ae1ec14b3041d024bf68e0dd884208413aba3d
    Size: 12.54 kB
  12. rubygem-abrt-doc-0.4.0-1.module+el8+1830+be0430a8.noarch.rpm
    MD5: e50eabf30348b2757322c0f35399ef48
    SHA-256: b12fda7c1624b64406b6ccdfce46b9c33c956bbfae664effd9468dbcc53ce7d0
    Size: 256.32 kB
  13. rubygem-bigdecimal-3.1.1-144.module+el8+1830+be0430a8.i686.rpm
    MD5: d9dcfef42a0f4705fd1215e88174f520
    SHA-256: 0eda3eb972f3b9a1c2d653e60de0149c3735d2b56fa84577919b35f165f6b874
    Size: 117.87 kB
  14. rubygem-bigdecimal-3.1.1-144.module+el8+1830+be0430a8.x86_64.rpm
    MD5: 3db8c79282b28afae07431428ff17ccd
    SHA-256: 822b6fefd04dd18ede80a414d72119578e8a164bd99358825ceea059996e40c3
    Size: 113.97 kB
  15. rubygem-bundler-2.3.27-144.module+el8+1830+be0430a8.noarch.rpm
    MD5: 8ee303b59a8d18c3630f1fdcb9a54555
    SHA-256: fa66478b7456893aa407a4683a9da6ac5272e682e458781f4e40af68475d3fb1
    Size: 457.96 kB
  16. rubygem-io-console-0.5.11-144.module+el8+1830+be0430a8.i686.rpm
    MD5: e72c160fe6b9e429db53381ae13e3154
    SHA-256: 9dfef45ef647ca7065fa0434680142ddc75efb12e9d4edc12fad62d50a87d62f
    Size: 73.90 kB
  17. rubygem-io-console-0.5.11-144.module+el8+1830+be0430a8.x86_64.rpm
    MD5: 4ff21329b9ba7ba4d21769eb81d1d6eb
    SHA-256: deb503f68276449a6302ed7621b8622a8f79ed86b698f522b2182ffab2055c93
    Size: 72.28 kB
  18. rubygem-irb-1.4.1-144.module+el8+1830+be0430a8.noarch.rpm
    MD5: 3c934bb6e2c6eab2d0d8065bb6a855c9
    SHA-256: 5fc916e3c1a3e43645e10435be228a74e0d63e7a215c1ba62b5dede6a8a9d943
    Size: 126.74 kB
  19. rubygem-json-2.6.1-144.module+el8+1830+be0430a8.i686.rpm
    MD5: 2fa2bcedc752ff723a034b05dd770702
    SHA-256: af6a25fe49b4db24b22762d7ff328c7460e531e648036a7ef40d2ee426db8666
    Size: 100.96 kB
  20. rubygem-json-2.6.1-144.module+el8+1830+be0430a8.x86_64.rpm
    MD5: bf002f7bded24ba14ea8bf71c546213e
    SHA-256: 8150d85750e4a98bf30ba1e80327d01153ce69ec319dd6e8d2b08c95499a9615
    Size: 99.76 kB
  21. rubygem-minitest-5.15.0-144.module+el8+1830+be0430a8.noarch.rpm
    MD5: 5e3d484e92075ee61d68fd3c105033e7
    SHA-256: fa2c8fd267cc51093a28c3c0e954005c0b6ca8c32ce64ce535de9b173e4fa840
    Size: 133.81 kB
  22. rubygem-mysql2-0.5.3-3.module+el8+1830+be0430a8.x86_64.rpm
    MD5: 5a27d07863865223b4a4a99af3e48827
    SHA-256: 304f46846a672a52600f7c514fecd48afdd451b7ada9591192ff30b815f12a79
    Size: 45.09 kB
  23. rubygem-mysql2-debugsource-0.5.3-3.module+el8+1830+be0430a8.x86_64.rpm
    MD5: 36fca0902fd4f83a03c34bbf89f373c9
    SHA-256: 46ebf7e6cf40850f1fdefae5472de17e7cd96cc7c552fed035d7b22a55079f95
    Size: 37.12 kB
  24. rubygem-mysql2-doc-0.5.3-3.module+el8+1830+be0430a8.noarch.rpm
    MD5: 56ea70b4727e2de76df319d51d386a05
    SHA-256: 8a237afdb604522570b24a5fc2e89134d16efcf0de9971bb511d82148af62441
    Size: 305.55 kB
  25. rubygem-pg-1.3.2-1.module+el8+1830+be0430a8.x86_64.rpm
    MD5: f41f0d5864b0f896031e645ab0fa2faf
    SHA-256: 691226e9d4a1affc9d581975d3ce9454127a0cb4dafdd79a71204ecf95f8bb58
    Size: 109.68 kB
  26. rubygem-pg-debugsource-1.3.2-1.module+el8+1830+be0430a8.x86_64.rpm
    MD5: a412018d019700e91e0903fa9bcb97a9
    SHA-256: c5043291baacbfb396e74c356831412e524996206f6a5c110bae0db239394d61
    Size: 100.07 kB
  27. rubygem-pg-doc-1.3.2-1.module+el8+1830+be0430a8.noarch.rpm
    MD5: 79f33cb568e62dde8eaeae40fefd73c6
    SHA-256: 46f9e795e0f011e379ee5d16d5e0610aba596dbae12bee038cb639f90512335b
    Size: 570.68 kB
  28. rubygem-power_assert-2.0.1-144.module+el8+1830+be0430a8.noarch.rpm
    MD5: 2748ec5c28e69a9b7517db0940b923cc
    SHA-256: d79e254fe685417791029446825d6c683608924f12ff580a5e8628059b24c59c
    Size: 70.68 kB
  29. rubygem-psych-4.0.4-144.module+el8+1830+be0430a8.i686.rpm
    MD5: 7bfee048ca8fb58a64d825248674e1f7
    SHA-256: bf1c4f394649edc0ba605a7d7d88f6d15f19ed595c8d0d943218aa5c0c5a084a
    Size: 100.51 kB
  30. rubygem-psych-4.0.4-144.module+el8+1830+be0430a8.x86_64.rpm
    MD5: 4b4b9ded9dbfb1f66b23283140fcbcae
    SHA-256: 7ef6fc65607afeb7d24748d30c4d456ba3f5eaababa740d4ca0a1a3884254468
    Size: 99.29 kB
  31. rubygem-rake-13.0.6-144.module+el8+1830+be0430a8.noarch.rpm
    MD5: ec6412a80637642767bad7c5c6bf33ef
    SHA-256: c151efa4445e2836b7e6f33c1323bdee2a46c7a52beaae96d5229c9dd0bca486
    Size: 139.79 kB
  32. rubygem-rbs-2.7.0-144.module+el8+1830+be0430a8.i686.rpm
    MD5: 0d761e70d7ce2a68dcb714c27222ae98
    SHA-256: 9b389e10e97c4432d5e0d6b45b5303d72634a8cbf060533c004aeac05715a5cc
    Size: 909.95 kB
  33. rubygem-rbs-2.7.0-144.module+el8+1830+be0430a8.x86_64.rpm
    MD5: 3e3bb6a760c09926f2f380d0d7637b97
    SHA-256: 790c8110b7d847a9243f6aa42b2fad921fe6540e87bd1ded5e6b9626d5206d46
    Size: 905.77 kB
  34. rubygem-rdoc-6.4.1.1-144.module+el8+1830+be0430a8.noarch.rpm
    MD5: cca8a91ffb16bddef0569105b288d735
    SHA-256: f41a1266bb7deff9b50b91b6940a1b85329483a46d820d1ba8a980298dfda0fe
    Size: 518.12 kB
  35. rubygem-rexml-3.2.5-144.module+el8+1830+be0430a8.noarch.rpm
    MD5: 312be0fad808854f7af1ea2a665a42f0
    SHA-256: eb447aaa4d428cb3f0bef49112e1cf95af52d6e6bae38ace6649ca36c4cd2b54
    Size: 148.85 kB
  36. rubygem-rss-0.2.9-144.module+el8+1830+be0430a8.noarch.rpm
    MD5: a9bdafc840936822d46caf1f7b0b2fed
    SHA-256: 39347f95c9536a45b16aec870d09c9588f1c2efd03487dae4befa39ca67021ca
    Size: 160.04 kB
  37. rubygems-3.3.27-144.module+el8+1830+be0430a8.noarch.rpm
    MD5: 228ac385030ac2493e571b1ef1dfa3b4
    SHA-256: dd6516d6295f40623408d36d6a01847c27f545bf5a91618d927a11eade338ebd
    Size: 323.58 kB
  38. rubygems-devel-3.3.27-144.module+el8+1830+be0430a8.noarch.rpm
    MD5: 97a41dbe352ec7e75e0e1b8ba5a11cfd
    SHA-256: b2a446ed1e2198152c0e4cd8c14c821183b7c4081e691820773eec457a48cb53
    Size: 62.36 kB
  39. rubygem-test-unit-3.5.3-144.module+el8+1830+be0430a8.noarch.rpm
    MD5: cbfd7af589998fc6f2df6390af03841d
    SHA-256: fd6efd2d862db2be4cbc60a88bb19fb920aa70d46ab7d2c98679535433ec7076
    Size: 147.17 kB
  40. rubygem-typeprof-0.21.3-144.module+el8+1830+be0430a8.noarch.rpm
    MD5: 84375ed1dc8d58ea0661ea632d11fe2a
    SHA-256: 3d9ad46483a4ff75357ca18d1b3bcec05a4f4b1b9e93a783280dcdef3c7ebbf1
    Size: 126.22 kB
  41. ruby-libs-3.1.5-144.module+el8+1830+be0430a8.i686.rpm
    MD5: 307a93b7e1f5b0676a7e7609b7364d95
    SHA-256: ce0ee17a8018058509d3ab9a523e565ced95cd70d274e8ed39127b3ad272a99c
    Size: 3.35 MB
  42. ruby-libs-3.1.5-144.module+el8+1830+be0430a8.x86_64.rpm
    MD5: cf15545b74057ddd3a47d6de735ba793
    SHA-256: 4f44931c42da68601fbdd2d9fcf9cbb595d244ebce7febaab5f959e04dc5656b
    Size: 3.27 MB