New Module: ruby:2.7
Summary
ALEA-2020:4759: new module: ruby:2.7. Affects rubygem-abrt across 3 version ranges.
< 0.4.0-1.module_el8.3.0+6147+d0dfc1e4
< 0.4.0-1.module_el8.4.0+2399+4e3a532a
< 0.4.0-1.module_el8.5.0+118+1ab773e1
Fixed in 0.4.0-1.module_el8.3.0+6147+d0dfc1e4, 0.4.0-1.module_el8.4.0+2399+4e3a532a or 0.4.0-1.module_el8.5.0+118+1ab773e1, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The ruby:2.7 module has been added to AlmaLinux. This module provides support for Ruby version 2.7. Ruby is a dynamic, open-source programming language known for its simplicity and productivity. It is widely used for web development, scripting, and automation tasks. The addition of the ruby:2.7 module enhances the capabilities of AlmaLinux for Ruby developers.
Vulnerability Detail
This update introduces a vulnerability in the ruby:2.7 module. The specific details of the vulnerability are not provided in the given information. However, it is important to note that vulnerabilities in software can lead to security breaches, data leaks, and unauthorized access. It is crucial to address and fix vulnerabilities promptly to ensure the security and stability of the system.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
sudo dnf update rubygem-abrt-
< 0.4.0-1.module_el8.3.0+6147+d0dfc1e40.4.0-1.module_el8.3.0+6147+d0dfc1e4 -
< 0.4.0-1.module_el8.4.0+2399+4e3a532a0.4.0-1.module_el8.4.0+2399+4e3a532a -
< 0.4.0-1.module_el8.5.0+118+1ab773e10.4.0-1.module_el8.5.0+118+1ab773e1
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
No specific workaround is mentioned in the given information. It is advisable to follow the recommended fix and update the affected packages to their fixed versions.
Conclusion
The addition of the ruby:2.7 module to AlmaLinux brings new features and capabilities for Ruby developers. However, it is important to address the introduced vulnerability promptly by updating the affected packages to their fixed versions. This will ensure the security and stability of the system. For further support on vulnerability remediation, you can reach out to the AlmaLinux support team.
See every vulnerability recorded for rubygem-abrt →
FAQ
The impact of this vulnerability is not specified in the given information. However, vulnerabilities in software can potentially lead to security breaches, data leaks, and unauthorized access.
You can use Vulert's playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Vulert uses a manifest file like package-lock.json to monitor and alert in real-time for open-source vulnerabilities in the software.
No specific workaround is mentioned in the given information. It is recommended to update the affected packages to their fixed versions.
You can find more information about this vulnerability in the AlmaLinux OSV database. The provided links in the vulnerability details section will direct you to the specific advisory for each affected package.
You can contact the AlmaLinux support team through their official website or support channels. They will be able to provide guidance and assistance with the update process and any other concerns related to this vulnerability.
References
Related vulnerabilities
Recent vulnerabilities recorded for rubygem-abrt.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
