FEDORA-MODULAR-2021-f620e155b8 — security update for ruby:2.7

stable

ruby-2.7-3320210609104615.601d93de

FEDORA-MODULAR-2021-f620e155b8 created by jackorp 3 years ago for Fedora 33 Modular

Security fix for CVE-2021-31799 CVE-2021-31810 CVE-2021-32066 CVE-2021-28965

This update has been submitted for testing by jackorp.

3 years ago

This update's test gating status has been changed to 'ignored'.

3 years ago

This update's test gating status has been changed to 'waiting'.

3 years ago

jackorp edited this update.

3 years ago

This update's test gating status has been changed to 'ignored'.

3 years ago

This update has been pushed to testing.

3 years ago

This update has been submitted for stable by bodhi.

3 years ago

This update has been pushed to stable.

3 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

Module

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

3 years ago

in testing

3 years ago

in stable

3 years ago

modified

3 years ago

Builds

ruby-2.7-3320210609104615.601d93de

BZ#1947526 CVE-2021-28965 ruby: XML round-trip vulnerability in REXML

BZ#1947529 CVE-2021-28965 ruby:2.7/ruby: XML round-trip vulnerability in REXML [fedora-33]

BZ#1980126 CVE-2021-31810 ruby: FTP PASV command response can cause Net::FTP to connect to arbitrary host

BZ#1980128 CVE-2021-32066 ruby: StartTLS stripping vulnerability in Net::IMAP

BZ#1980132 CVE-2021-31799 rubygem-rdoc: Command injection vulnerability in RDoc

BZ#1980568 CVE-2021-31799 CVE-2021-31810 CVE-2021-32066 ruby:2.7/ruby: various flaws [fedora-all]

ruby-2.7-3320210609104615.601d93de

Automated Test Results

ignored