ruby:3.1 security update

エラータID: AXSA:2024-9453:01

リリース日: 
2024/12/20 Friday - 18:58
題名: 
ruby:3.1 security update
影響のあるチャネル: 
MIRACLE LINUX 9 for x86_64
Severity: 
High
Description: 

以下項目について対処しました。

[Security Fix]
- REXML には、リモートの攻撃者により、16 進数値の参照
文字である "&#" と "x...;" の間に多数の数字が含まれるよう
に細工された XML 形式のデータの解析を介して、正規表現
サービス拒否攻撃を可能とする脆弱性が存在します。
(CVE-2024-49761)

Modularity name: ruby
Stream name: 3.1

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2024-49761
REXML is an XML toolkit for Ruby. The REXML gem before 3.3.9 has a ReDoS vulnerability when it parses an XML that has many digits between &# and x...; in a hex numeric character reference (&#x...;). This does not happen with Ruby 3.2 or later. Ruby 3.1 is the only affected maintained Ruby. The REXML gem 3.3.9 or later include the patch to fix the vulnerability.
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. rubygem-mysql2-0.5.4-1.module+el9+1055+962c0eb1.ML.1.src.rpm
    MD5: 828bee036f6369939c9c79e31a5c6bcc
    SHA-256: acab930cac717ddb87e9cc1d3d17290371638dc9480b13d28ca68619ba6e44d6
    Size: 113.20 kB
  2. rubygem-pg-1.3.5-1.module+el9+1055+962c0eb1.src.rpm
    MD5: 26a1c6342652bb14c2856598345d784f
    SHA-256: 6d67f1f8025ee86011211f497ee83f295b68d5017929792b72af7e20fb232149
    Size: 263.15 kB
  3. ruby-3.1.5-145.module+el9+1055+962c0eb1.src.rpm
    MD5: d9130f8dc66a15d6208ecdeae9679c12
    SHA-256: 0e5e1689831eac87f06684c89fcce5cad8624a47c04ea827b8daa555f9ad992f
    Size: 14.68 MB

Asianux Server 9 for x86_64
  1. ruby-3.1.5-145.module+el9+1055+962c0eb1.i686.rpm
    MD5: 29d9a46adc746ce59d278d2a6ab8b9c5
    SHA-256: 6b55bf663220b6121858f274c7f728c97441bfa6334010748482a4e99b0f5f99
    Size: 38.40 kB
  2. ruby-3.1.5-145.module+el9+1055+962c0eb1.x86_64.rpm
    MD5: 7366057f1d3aae94284b96b84f2acaa7
    SHA-256: bc075ce14bcc229b0da5439a436681cc1a1159dbc43d7380d11fea3d17e0df70
    Size: 38.29 kB
  3. ruby-bundled-gems-3.1.5-145.module+el9+1055+962c0eb1.i686.rpm
    MD5: ec91188484011bfbd8090a3133c723ed
    SHA-256: 86cbf576b944773fb9214bbe37b78cfe9f0cdea2988a9b76969a25b406838641
    Size: 182.57 kB
  4. ruby-bundled-gems-3.1.5-145.module+el9+1055+962c0eb1.x86_64.rpm
    MD5: e94334124e8d1865773e092aac0417de
    SHA-256: 1a53d6735b79ffb6dd50b1062d6a93a85c733cbf73ad73e964b1f786d2f63e5f
    Size: 182.16 kB
  5. ruby-debugsource-3.1.5-145.module+el9+1055+962c0eb1.i686.rpm
    MD5: dd7021e8ffeb6b297361fabf8408aaa1
    SHA-256: dcda6f60f322571e9795cf4facf085b6aa3c1ede271545748bc3bddca6ac67b9
    Size: 3.65 MB
  6. ruby-debugsource-3.1.5-145.module+el9+1055+962c0eb1.x86_64.rpm
    MD5: 5d989391b5f14d2b64965e5bed1c899a
    SHA-256: 8dc46421828d01556f7f7570206bb58ac089ded91b4607fe5a482c6008614aaf
    Size: 3.71 MB
  7. ruby-default-gems-3.1.5-145.module+el9+1055+962c0eb1.noarch.rpm
    MD5: 5083d1f131cd8d4dbbfd5194ab1dbcc1
    SHA-256: e59ef8f28b4b3ad4ea7099de310766efeee0da3ac1ba90a850c5c38a7e92a406
    Size: 42.78 kB
  8. ruby-devel-3.1.5-145.module+el9+1055+962c0eb1.i686.rpm
    MD5: 9a92d54a093a6b901a6d91216ae14aa1
    SHA-256: 906149fc5444d2760f8923bea09ce3c3b83846ede5d84a5b5fe83e4b4ccad3f1
    Size: 459.80 kB
  9. ruby-devel-3.1.5-145.module+el9+1055+962c0eb1.x86_64.rpm
    MD5: b0e4ee56cdd750fde7b695507d0ad72e
    SHA-256: 96aac6662d27792f982253097613befdbe033f5ff83db0a28374b56b6d4f9e6a
    Size: 459.82 kB
  10. ruby-doc-3.1.5-145.module+el9+1055+962c0eb1.noarch.rpm
    MD5: b0a2ac273291255d8e9eb8076b4e16f6
    SHA-256: 0f73e1fbbd53cb8b62fb9c289fa20441d7659af8db058c1ec17203390ed6b98c
    Size: 7.52 MB
  11. rubygem-bigdecimal-3.1.1-145.module+el9+1055+962c0eb1.i686.rpm
    MD5: c2a9aeae7a0f60bab2f4f8957d680fc7
    SHA-256: 0db49e09a9f7dfc70077fb83b9168fe6b08aa9f1d2d32d86c3ed377040d7af5c
    Size: 70.38 kB
  12. rubygem-bigdecimal-3.1.1-145.module+el9+1055+962c0eb1.x86_64.rpm
    MD5: 70337b792f0b41c290cf34b7e09fbfb4
    SHA-256: 25eceaa5a6485f562a9cb9335d888c3381b5cddcdcc087b4ed8884e281cd4736
    Size: 66.00 kB
  13. rubygem-bundler-2.3.27-145.module+el9+1055+962c0eb1.noarch.rpm
    MD5: 9145aaaa719ef38112c0b4501cd6690c
    SHA-256: 85c8ec7ef7b845d8623523b47954e9f1cbdeeb33576860a76fb078e4ed1cf499
    Size: 452.53 kB
  14. rubygem-io-console-0.5.11-145.module+el9+1055+962c0eb1.i686.rpm
    MD5: 7f0d8dbb6610848c35e5b5459c20075a
    SHA-256: 929f09e932eb45bba0acde9cc5e8089df0d23a9f19b60384a2d48258af1b3ec2
    Size: 23.86 kB
  15. rubygem-io-console-0.5.11-145.module+el9+1055+962c0eb1.x86_64.rpm
    MD5: e9f374ac37211fef7bb1678ae2d57d3b
    SHA-256: eb0f5e538ac5fc665895a673861788d97f45c71d2a05bb215fd12687cd000946
    Size: 22.12 kB
  16. rubygem-irb-1.4.1-145.module+el9+1055+962c0eb1.noarch.rpm
    MD5: 7f235c47395c25d87bae92a9488f612c
    SHA-256: e4b437b869a6ae1f67469cf23efa02ffa22e2d23b19081eff49ec4bb740ce124
    Size: 79.25 kB
  17. rubygem-json-2.6.1-145.module+el9+1055+962c0eb1.i686.rpm
    MD5: 7ae372a2bd399d46872a4ddcf6aae37d
    SHA-256: 8fbd1c72e300c44780f3602907115857fb98787359d420005c9c5476a9c03198
    Size: 58.72 kB
  18. rubygem-json-2.6.1-145.module+el9+1055+962c0eb1.x86_64.rpm
    MD5: 8acf410b755862a9d24664d69e1ac891
    SHA-256: fe1f237a5cea6772c6c9d54d84b8379f337020440d8592ffa962c8e9d2ef90f7
    Size: 56.92 kB
  19. rubygem-minitest-5.15.0-145.module+el9+1055+962c0eb1.noarch.rpm
    MD5: 92cdcdf4be52fb3621b433f0dcc11ab9
    SHA-256: 7da5b6f960c776363a0d230b82b72ec760838429ddbbf9ae5d2f8d64fa26a618
    Size: 86.46 kB
  20. rubygem-mysql2-0.5.4-1.module+el9+1055+962c0eb1.ML.1.x86_64.rpm
    MD5: eef6391ab81a6db4f4868b2a3f1205b5
    SHA-256: 3b345045913509fb55cac579c56b506cc28944c3e9dbece87ade562f943efd0f
    Size: 51.45 kB
  21. rubygem-mysql2-debugsource-0.5.4-1.module+el9+1055+962c0eb1.ML.1.x86_64.rpm
    MD5: ceee775c9ade9a41b8ac0fbd4cb4743e
    SHA-256: 05c850c16183936a085536198edd913e11eaee5b7d59de6d8f161ce483802970
    Size: 34.88 kB
  22. rubygem-mysql2-doc-0.5.4-1.module+el9+1055+962c0eb1.ML.1.noarch.rpm
    MD5: 15d9ce6a5cb89545804640177a437ab9
    SHA-256: d90ff8ba63936d0d9a3e0ae758b5f42a6ad7f34ac5d08d78577cf7645ed16cbc
    Size: 346.79 kB
  23. rubygem-pg-1.3.5-1.module+el9+1055+962c0eb1.x86_64.rpm
    MD5: 1efa0bf99188864448ad7341e42d7812
    SHA-256: 2a6ec741178a491004b787c0228755d77f05dcd47cad3a439649713f8d9f1bfa
    Size: 116.90 kB
  24. rubygem-pg-debugsource-1.3.5-1.module+el9+1055+962c0eb1.x86_64.rpm
    MD5: a0aede3c06613787fed8b0039d71a2a8
    SHA-256: 8a4db784d389f5923c8c48978827d5ff97a1dadb1528700ddf03cb6cac5bcef6
    Size: 97.55 kB
  25. rubygem-pg-doc-1.3.5-1.module+el9+1055+962c0eb1.noarch.rpm
    MD5: 9cbb4cc4e076ea8e1ded009d71fd79ba
    SHA-256: e61584d189ccedcb92d892ba3e7f254cbf1bc82d4536177e3b7f71ad9bd93f8e
    Size: 710.00 kB
  26. rubygem-power_assert-2.0.1-145.module+el9+1055+962c0eb1.noarch.rpm
    MD5: cfdbef24beebf87d19013ffd3d76f95e
    SHA-256: 49de482c65d5306a02fdcd35715fe2feae440c5c1489fd050bca1e836408951d
    Size: 24.31 kB
  27. rubygem-psych-4.0.4-145.module+el9+1055+962c0eb1.i686.rpm
    MD5: 256cc973e3634a0818e59c94a2cb7692
    SHA-256: bf1004d3b152ed5ab8a59ea2c361ec7b5435361356dc7af29762a4fa93bdeba2
    Size: 59.21 kB
  28. rubygem-psych-4.0.4-145.module+el9+1055+962c0eb1.x86_64.rpm
    MD5: f1fd5b5cab9677d46c7faf5835c3fc1b
    SHA-256: e9d55fb968c911cb4d53d9a1e9376ef45d53cf80330ba0f25dff61dd1c66f3a5
    Size: 58.18 kB
  29. rubygem-rake-13.0.6-145.module+el9+1055+962c0eb1.noarch.rpm
    MD5: 8e0c846993f8fdb0356108c37057fbf7
    SHA-256: 484835d65425dd423fe04dfb4f18145aac71f5b37d470f11f2db0ef0a53e3499
    Size: 99.83 kB
  30. rubygem-rbs-2.7.0-145.module+el9+1055+962c0eb1.i686.rpm
    MD5: c6cc03d7bbeae1932bf77e12f7d9a778
    SHA-256: 871170bed40411bdf15d4be4f6240ce8c7f5f1c122c55648aa9705835155654a
    Size: 859.36 kB
  31. rubygem-rbs-2.7.0-145.module+el9+1055+962c0eb1.x86_64.rpm
    MD5: 39cfe1e626073cb6e9151566e106a2ab
    SHA-256: fb973f97be9d82f53a4ef002fe68777a2940bb245080e5d094d2ef5337d2779a
    Size: 855.11 kB
  32. rubygem-rdoc-6.4.1.1-145.module+el9+1055+962c0eb1.noarch.rpm
    MD5: 1c37826f3be6b35920ce3d380eab4bf2
    SHA-256: a22245cf2e6911c184508112be22a24ae0a9467f67edca87459f9af4efc5734a
    Size: 496.72 kB
  33. rubygem-rexml-3.2.5-145.module+el9+1055+962c0eb1.noarch.rpm
    MD5: e90cddce62f536e6fbf63e2f672dacc9
    SHA-256: 93f7aa0d5d7e603f6efaf25022991a114c30832ee53a91814371e9517000f316
    Size: 107.60 kB
  34. rubygem-rss-0.2.9-145.module+el9+1055+962c0eb1.noarch.rpm
    MD5: faca82893f43db4f5bc4ea6402a77d44
    SHA-256: 5fa806af03a40d7f6ac2e5c60ed272253bd6f1ace8efb462b621185141cde2d0
    Size: 121.68 kB
  35. rubygems-3.3.27-145.module+el9+1055+962c0eb1.noarch.rpm
    MD5: 81bb5f97ce982a45d1185bc3661a4ea4
    SHA-256: d9057cdae7314025126ab58b0c824e4141d5d390b09b3dbdbf2b1549b79e57a6
    Size: 293.98 kB
  36. rubygems-devel-3.3.27-145.module+el9+1055+962c0eb1.noarch.rpm
    MD5: e1303e2b26d651e3d03b3dec36c8ad44
    SHA-256: 992938703dafbb99be1654faa3a2cb8a9033f90c360dcf9d6e984f7cb09916e4
    Size: 11.63 kB
  37. rubygem-test-unit-3.5.3-145.module+el9+1055+962c0eb1.noarch.rpm
    MD5: 82faef4912579d865e5c0f351ffe8acc
    SHA-256: 040a6da3cb858fff362c68d140c5c9a68ff289446c4ebe6fd90d7e828b1b643b
    Size: 107.06 kB
  38. rubygem-typeprof-0.21.3-145.module+el9+1055+962c0eb1.noarch.rpm
    MD5: 496990fcc00a038a1eea68dbf6aac3f9
    SHA-256: 5a34743aa6f51f6c90f898c236df6dc898ee94cef84ba4c6752ffa122b2b1bb4
    Size: 77.29 kB
  39. ruby-libs-3.1.5-145.module+el9+1055+962c0eb1.i686.rpm
    MD5: 416b911d3178c68929cdbc10074506e0
    SHA-256: 28d7816b467275da7d4c378099c8a54aef1b6f22853814d5cacdd1d932f8ac1c
    Size: 3.34 MB
  40. ruby-libs-3.1.5-145.module+el9+1055+962c0eb1.x86_64.rpm
    MD5: ba63df0d786541c4109626b7cc3815c3
    SHA-256: 591ced0d87c7eaf1014111a872de13304146365a2a1a6f53e7e6441a1fe6eb40
    Size: 3.30 MB