Important: ruby:2.5 security update
Summary
ALSA-2019:1972: Important: ruby:2.5 security update. Affects rubygem-abrt across 2 version ranges.
< 0.3.0-4.module_el8.5.0+259+8cec6917
< 0.3.0-4.module_el8.5.0+2623+08a8ba32
Fixed in 0.3.0-4.module_el8.5.0+259+8cec6917 or 0.3.0-4.module_el8.5.0+2623+08a8ba32, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.
Vulnerability Detail
Installing a malicious gem in rubygems may lead to arbitrary code execution.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
sudo dnf update rubygem-abrt-
< 0.3.0-4.module_el8.5.0+259+8cec69170.3.0-4.module_el8.5.0+259+8cec6917 -
< 0.3.0-4.module_el8.5.0+2623+08a8ba320.3.0-4.module_el8.5.0+2623+08a8ba32
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Conclusion
This vulnerability in the ruby package can be fixed by updating to the latest version. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for rubygem-abrt →
FAQ
This vulnerability allows an attacker to execute arbitrary code on the affected system.
You can use Vulert's playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability.
There are no known workarounds for this vulnerability.
The CVSS score for this vulnerability is not provided in the available information.
You can refer to the CVE page(s) listed in the References section of the vulnerability details.
References
Related vulnerabilities
Recent vulnerabilities recorded for rubygem-abrt.
