Release ruby-2.5.9-112.module+el8.10.0+22021+135c76a8 ALSA-2024:4499

[maccelf]

ALSA-2024:4499: ruby security update (Moderate) Severity: Moderate Description Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

• rubygem-uri: ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755 (CVE-2023-36617)
• ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)
• ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)
• ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)
• REXML: DoS parsing an XML with many <s in an attribute value (CVE-2024-35176)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected packages: ruby-2.5.9-112.module+el8.10.0+22021+135c76a8.aarch64 ruby-2.5.9-112.module+el8.10.0+22021+135c76a8.i686 ruby-2.5.9-112.module+el8.10.0+22021+135c76a8.ppc64le ruby-2.5.9-112.module+el8.10.0+22021+135c76a8.s390x ruby-2.5.9-112.module+el8.10.0+22021+135c76a8.x86_64 ruby-devel-2.5.9-112.module+el8.10.0+22021+135c76a8.aarch64 ruby-devel-2.5.9-112.module+el8.10.0+22021+135c76a8.i686 ruby-devel-2.5.9-112.module+el8.10.0+22021+135c76a8.ppc64le ruby-devel-2.5.9-112.module+el8.10.0+22021+135c76a8.s390x ruby-devel-2.5.9-112.module+el8.10.0+22021+135c76a8.x86_64 ruby-doc-2.5.9-112.module+el8.10.0+22021+135c76a8.aarch64 ruby-doc-2.5.9-112.module+el8.10.0+22021+135c76a8.ppc64le ruby-doc-2.5.9-112.module+el8.10.0+22021+135c76a8.s390x ruby-doc-2.5.9-112.module+el8.10.0+22021+135c76a8.x86_64 ruby-irb-2.5.9-112.module+el8.10.0+22021+135c76a8.aarch64 ruby-irb-2.5.9-112.module+el8.10.0+22021+135c76a8.ppc64le ruby-irb-2.5.9-112.module+el8.10.0+22021+135c76a8.s390x ruby-irb-2.5.9-112.module+el8.10.0+22021+135c76a8.x86_64 ruby-libs-2.5.9-112.module+el8.10.0+22021+135c76a8.aarch64 ruby-libs-2.5.9-112.module+el8.10.0+22021+135c76a8.i686 ruby-libs-2.5.9-112.module+el8.10.0+22021+135c76a8.ppc64le ruby-libs-2.5.9-112.module+el8.10.0+22021+135c76a8.s390x ruby-libs-2.5.9-112.module+el8.10.0+22021+135c76a8.x86_64 rubygem-abrt-0.3.0-4.module+el8.10.0+22021+135c76a8.aarch64 rubygem-abrt-0.3.0-4.module+el8.10.0+22021+135c76a8.ppc64le rubygem-abrt-0.3.0-4.module+el8.10.0+22021+135c76a8.s390x rubygem-abrt-0.3.0-4.module+el8.10.0+22021+135c76a8.x86_64 rubygem-abrt-doc-0.3.0-4.module+el8.10.0+22021+135c76a8.aarch64 rubygem-abrt-doc-0.3.0-4.module+el8.10.0+22021+135c76a8.ppc64le rubygem-abrt-doc-0.3.0-4.module+el8.10.0+22021+135c76a8.s390x rubygem-abrt-doc-0.3.0-4.module+el8.10.0+22021+135c76a8.x86_64 rubygem-bigdecimal-1.3.4-112.module+el8.10.0+22021+135c76a8.aarch64 rubygem-bigdecimal-1.3.4-112.module+el8.10.0+22021+135c76a8.i686 rubygem-bigdecimal-1.3.4-112.module+el8.10.0+22021+135c76a8.ppc64le rubygem-bigdecimal-1.3.4-112.module+el8.10.0+22021+135c76a8.s390x rubygem-bigdecimal-1.3.4-112.module+el8.10.0+22021+135c76a8.x86_64 rubygem-bson-4.3.0-2.module+el8.9.0+19193+435404ae.aarch64 rubygem-bson-4.3.0-2.module+el8.9.0+19193+435404ae.ppc64le rubygem-bson-4.3.0-2.module+el8.9.0+19193+435404ae.s390x rubygem-bson-4.3.0-2.module+el8.9.0+19193+435404ae.x86_64 rubygem-bson-doc-4.3.0-2.module+el8.9.0+19193+435404ae.aarch64 rubygem-bson-doc-4.3.0-2.module+el8.9.0+19193+435404ae.ppc64le rubygem-bson-doc-4.3.0-2.module+el8.9.0+19193+435404ae.s390x rubygem-bson-doc-4.3.0-2.module+el8.9.0+19193+435404ae.x86_64 rubygem-bundler-1.16.1-4.module+el8.10.0+22021+135c76a8.aarch64 rubygem-bundler-1.16.1-4.module+el8.10.0+22021+135c76a8.ppc64le rubygem-bundler-1.16.1-4.module+el8.10.0+22021+135c76a8.s390x rubygem-bundler-1.16.1-4.module+el8.10.0+22021+135c76a8.x86_64 rubygem-bundler-doc-1.16.1-4.module+el8.10.0+22021+135c76a8.aarch64 rubygem-bundler-doc-1.16.1-4.module+el8.10.0+22021+135c76a8.ppc64le rubygem-bundler-doc-1.16.1-4.module+el8.10.0+22021+135c76a8.s390x rubygem-bundler-doc-1.16.1-4.module+el8.10.0+22021+135c76a8.x86_64 rubygem-did_you_mean-1.2.0-112.module+el8.10.0+22021+135c76a8.aarch64 rubygem-did_you_mean-1.2.0-112.module+el8.10.0+22021+135c76a8.ppc64le rubygem-did_you_mean-1.2.0-112.module+el8.10.0+22021+135c76a8.s390x rubygem-did_you_mean-1.2.0-112.module+el8.10.0+22021+135c76a8.x86_64 rubygem-io-console-0.4.6-112.module+el8.10.0+22021+135c76a8.aarch64 rubygem-io-console-0.4.6-112.module+el8.10.0+22021+135c76a8.i686 rubygem-io-console-0.4.6-112.module+el8.10.0+22021+135c76a8.ppc64le rubygem-io-console-0.4.6-112.module+el8.10.0+22021+135c76a8.s390x rubygem-io-console-0.4.6-112.module+el8.10.0+22021+135c76a8.x86_64 rubygem-json-2.1.0-112.module+el8.10.0+22021+135c76a8.aarch64 rubygem-json-2.1.0-112.module+el8.10.0+22021+135c76a8.i686 rubygem-json-2.1.0-112.module+el8.10.0+22021+135c76a8.ppc64le rubygem-json-2.1.0-112.module+el8.10.0+22021+135c76a8.s390x rubygem-json-2.1.0-112.module+el8.10.0+22021+135c76a8.x86_64 rubygem-minitest-5.10.3-112.module+el8.10.0+22021+135c76a8.aarch64 rubygem-minitest-5.10.3-112.module+el8.10.0+22021+135c76a8.ppc64le rubygem-minitest-5.10.3-112.module+el8.10.0+22021+135c76a8.s390x rubygem-minitest-5.10.3-112.module+el8.10.0+22021+135c76a8.x86_64 rubygem-mongo-2.5.1-2.module+el8.9.0+19193+435404ae.aarch64 rubygem-mongo-2.5.1-2.module+el8.9.0+19193+435404ae.ppc64le rubygem-mongo-2.5.1-2.module+el8.9.0+19193+435404ae.s390x rubygem-mongo-2.5.1-2.module+el8.9.0+19193+435404ae.x86_64 rubygem-mongo-doc-2.5.1-2.module+el8.9.0+19193+435404ae.aarch64 rubygem-mongo-doc-2.5.1-2.module+el8.9.0+19193+435404ae.ppc64le rubygem-mongo-doc-2.5.1-2.module+el8.9.0+19193+435404ae.s390x rubygem-mongo-doc-2.5.1-2.module+el8.9.0+19193+435404ae.x86_64 rubygem-mysql2-0.4.10-4.module+el8.9.0+19193+435404ae.aarch64 rubygem-mysql2-0.4.10-4.module+el8.9.0+19193+435404ae.ppc64le rubygem-mysql2-0.4.10-4.module+el8.9.0+19193+435404ae.s390x rubygem-mysql2-0.4.10-4.module+el8.9.0+19193+435404ae.x86_64 rubygem-mysql2-doc-0.4.10-4.module+el8.9.0+19193+435404ae.aarch64 rubygem-mysql2-doc-0.4.10-4.module+el8.9.0+19193+435404ae.ppc64le rubygem-mysql2-doc-0.4.10-4.module+el8.9.0+19193+435404ae.s390x rubygem-mysql2-doc-0.4.10-4.module+el8.9.0+19193+435404ae.x86_64 rubygem-net-telnet-0.1.1-112.module+el8.10.0+22021+135c76a8.aarch64 rubygem-net-telnet-0.1.1-112.module+el8.10.0+22021+135c76a8.ppc64le rubygem-net-telnet-0.1.1-112.module+el8.10.0+22021+135c76a8.s390x rubygem-net-telnet-0.1.1-112.module+el8.10.0+22021+135c76a8.x86_64 rubygem-openssl-2.1.2-112.module+el8.10.0+22021+135c76a8.aarch64 rubygem-openssl-2.1.2-112.module+el8.10.0+22021+135c76a8.i686 rubygem-openssl-2.1.2-112.module+el8.10.0+22021+135c76a8.ppc64le rubygem-openssl-2.1.2-112.module+el8.10.0+22021+135c76a8.s390x rubygem-openssl-2.1.2-112.module+el8.10.0+22021+135c76a8.x86_64 rubygem-pg-1.0.0-3.module+el8.9.0+19193+435404ae.aarch64 rubygem-pg-1.0.0-3.module+el8.9.0+19193+435404ae.ppc64le rubygem-pg-1.0.0-3.module+el8.9.0+19193+435404ae.s390x rubygem-pg-1.0.0-3.module+el8.9.0+19193+435404ae.x86_64 rubygem-pg-doc-1.0.0-3.module+el8.9.0+19193+435404ae.aarch64 rubygem-pg-doc-1.0.0-3.module+el8.9.0+19193+435404ae.ppc64le rubygem-pg-doc-1.0.0-3.module+el8.9.0+19193+435404ae.s390x rubygem-pg-doc-1.0.0-3.module+el8.9.0+19193+435404ae.x86_64 rubygem-power_assert-1.1.1-112.module+el8.10.0+22021+135c76a8.aarch64 rubygem-power_assert-1.1.1-112.module+el8.10.0+22021+135c76a8.ppc64le rubygem-power_assert-1.1.1-112.module+el8.10.0+22021+135c76a8.s390x rubygem-power_assert-1.1.1-112.module+el8.10.0+22021+135c76a8.x86_64 rubygem-psych-3.0.2-112.module+el8.10.0+22021+135c76a8.aarch64 rubygem-psych-3.0.2-112.module+el8.10.0+22021+135c76a8.i686 rubygem-psych-3.0.2-112.module+el8.10.0+22021+135c76a8.ppc64le rubygem-psych-3.0.2-112.module+el8.10.0+22021+135c76a8.s390x rubygem-psych-3.0.2-112.module+el8.10.0+22021+135c76a8.x86_64 rubygem-rake-12.3.3-112.module+el8.10.0+22021+135c76a8.aarch64 rubygem-rake-12.3.3-112.module+el8.10.0+22021+135c76a8.ppc64le rubygem-rake-12.3.3-112.module+el8.10.0+22021+135c76a8.s390x rubygem-rake-12.3.3-112.module+el8.10.0+22021+135c76a8.x86_64 rubygem-rdoc-6.0.1.1-112.module+el8.10.0+22021+135c76a8.aarch64 rubygem-rdoc-6.0.1.1-112.module+el8.10.0+22021+135c76a8.ppc64le rubygem-rdoc-6.0.1.1-112.module+el8.10.0+22021+135c76a8.s390x rubygem-rdoc-6.0.1.1-112.module+el8.10.0+22021+135c76a8.x86_64 rubygem-test-unit-3.2.7-112.module+el8.10.0+22021+135c76a8.aarch64 rubygem-test-unit-3.2.7-112.module+el8.10.0+22021+135c76a8.ppc64le rubygem-test-unit-3.2.7-112.module+el8.10.0+22021+135c76a8.s390x rubygem-test-unit-3.2.7-112.module+el8.10.0+22021+135c76a8.x86_64 rubygem-xmlrpc-0.3.0-112.module+el8.10.0+22021+135c76a8.aarch64 rubygem-xmlrpc-0.3.0-112.module+el8.10.0+22021+135c76a8.ppc64le rubygem-xmlrpc-0.3.0-112.module+el8.10.0+22021+135c76a8.s390x rubygem-xmlrpc-0.3.0-112.module+el8.10.0+22021+135c76a8.x86_64 rubygems-2.7.6.3-112.module+el8.10.0+22021+135c76a8.aarch64 rubygems-2.7.6.3-112.module+el8.10.0+22021+135c76a8.ppc64le rubygems-2.7.6.3-112.module+el8.10.0+22021+135c76a8.s390x rubygems-2.7.6.3-112.module+el8.10.0+22021+135c76a8.x86_64 rubygems-devel-2.7.6.3-112.module+el8.10.0+22021+135c76a8.aarch64 rubygems-devel-2.7.6.3-112.module+el8.10.0+22021+135c76a8.ppc64le rubygems-devel-2.7.6.3-112.module+el8.10.0+22021+135c76a8.s390x rubygems-devel-2.7.6.3-112.module+el8.10.0+22021+135c76a8.x86_64

[maccelf]

Errata created in ALBS: https://build.almalinux.org/errata?id=ALSA-2024:4499&platform_id=1

[maccelf]

Find packages in prod repos

[maccelf]

['ALSA-2024:4499'] is released