Vulnerability · Published Apr 29, 2021 · Assigned by mitre
CVE-2020-36327
High 8.8
In plain English
A high-severity security flaw in the ruby package (AlmaLinux). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 6.3% (higher than 94% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)8.8High
Exploit odds (30 days)6.3%top 6.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Bundler 1.16.0 through 2.2.9 and 2.2.11 through 2.2.16 sometimes chooses a dependency source based on the highest gem version number, which means that a rogue gem found at a public source may be chosen, even if the intended choice was a private gem that is a dependency of another private gem that is explicitly depended on by the application. NOTE: it is not correct to use CVE-2021-24105 for every "Dependency Confusion" issue in every product.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | ruby | 2.7.4-137.module_el8.5.0+117+35d1289b | ALSA-2021:3020 |
| AlmaLinux:8 | ruby | 2.5.9-107.module_el8.5.0+2625+ec418553 | ALSA-2022:0545 |
| AlmaLinux:8 | ruby | 2.6.9-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | ruby | 2.6.9-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | ruby | 2.7.4-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | ruby-default-gems | 2.7.4-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | ruby-devel | 2.6.9-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | ruby-devel | 2.7.4-137.module_el8.5.0+117+35d1289b | ALSA-2021:3020 |
| AlmaLinux:8 | ruby-devel | 2.6.9-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | ruby-devel | 2.5.9-107.module_el8.5.0+2625+ec418553 | ALSA-2022:0545 |
| AlmaLinux:8 | ruby-devel | 2.7.4-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | ruby-doc | 2.7.4-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | ruby-doc | 2.5.9-107.module_el8.5.0+2625+ec418553 | ALSA-2022:0545 |
| AlmaLinux:8 | ruby-doc | 2.6.9-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | ruby-doc | 2.6.9-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | ruby-irb | 2.5.9-107.module_el8.5.0+2625+ec418553 | ALSA-2022:0545 |
| AlmaLinux:8 | ruby-libs | 2.7.4-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | ruby-libs | 2.7.4-137.module_el8.5.0+117+35d1289b | ALSA-2021:3020 |
| AlmaLinux:8 | ruby-libs | 2.5.9-107.module_el8.5.0+2625+ec418553 | ALSA-2022:0545 |
| AlmaLinux:8 | ruby-libs | 2.6.9-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | ruby-libs | 2.6.9-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-abrt | 0.4.0-1.module_el8.5.0+118+1ab773e1 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-abrt | 0.3.0-4.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-abrt | 0.3.0-4.module_el8.5.0+259+8cec6917 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-abrt | 0.3.0-4.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygem-abrt | 0.3.0-4.module_el8.5.0+2625+ec418553 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygem-abrt | 0.3.0-4.module_el8.5.0+259+8cec6917 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygem-abrt | 0.4.0-1.module_el8.4.0+2399+4e3a532a | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-abrt | 0.4.0-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.3.0-4.module_el8.5.0+259+8cec6917 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.3.0-4.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.4.0-1.module_el8.4.0+2399+4e3a532a | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.3.0-4.module_el8.5.0+2625+ec418553 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.4.0-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.4.0-1.module_el8.5.0+118+1ab773e1 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.3.0-4.module_el8.5.0+259+8cec6917 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.3.0-4.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygem-bigdecimal | 1.3.4-107.module_el8.5.0+2625+ec418553 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygem-bigdecimal | 2.0.0-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-bigdecimal | 1.4.1-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-bigdecimal | 1.4.1-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-bigdecimal | 2.0.0-137.module_el8.5.0+117+35d1289b | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-bson | 4.5.0-1.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-bson | 4.8.1-1.module_el8.5.0+117+35d1289b | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-bson | 4.8.1-1.module_el8.4.0+2399+4e3a532a | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-bson | 4.8.1-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-bson | 4.3.0-2.module_el8.5.0+259+8cec6917 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygem-bson | 4.3.0-2.module_el8.5.0+2625+ec418553 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygem-bson | 4.5.0-1.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-bson-doc | 4.3.0-2.module_el8.5.0+259+8cec6917 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygem-bson-doc | 4.8.1-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-bson-doc | 4.5.0-1.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-bson-doc | 4.5.0-1.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-bson-doc | 4.3.0-2.module_el8.5.0+2625+ec418553 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygem-bundler | 1.16.1-4.module_el8.5.0+259+8cec6917 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygem-bundler | 2.2.24-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-bundler | 1.17.2-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-bundler | 1.17.2-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-bundler | 1.16.1-4.module_el8.5.0+2625+ec418553 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygem-bundler-doc | 1.16.1-4.module_el8.5.0+2625+ec418553 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygem-bundler-doc | 1.16.1-4.module_el8.5.0+259+8cec6917 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygem-did_you_mean | 1.3.0-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-did_you_mean | 1.3.0-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-did_you_mean | 1.2.0-107.module_el8.5.0+2625+ec418553 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygem-io-console | 0.4.6-107.module_el8.5.0+2625+ec418553 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygem-io-console | 0.5.6-137.module_el8.5.0+117+35d1289b | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-io-console | 0.5.6-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-io-console | 0.4.7-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-io-console | 0.4.7-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-irb | 1.0.0-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-irb | 1.0.0-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-irb | 1.2.6-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-json | 2.3.0-137.module_el8.5.0+117+35d1289b | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-json | 2.1.0-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-json | 2.3.0-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-json | 2.1.0-107.module_el8.5.0+2625+ec418553 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygem-json | 2.1.0-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-minitest | 5.13.0-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-minitest | 5.11.3-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-minitest | 5.11.3-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-minitest | 5.10.3-107.module_el8.5.0+2625+ec418553 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygem-mongo | 2.8.0-1.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-mongo | 2.11.3-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-mongo | 2.5.1-2.module_el8.5.0+259+8cec6917 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygem-mongo | 2.5.1-2.module_el8.5.0+2625+ec418553 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygem-mongo | 2.8.0-1.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-mongo-doc | 2.5.1-2.module_el8.5.0+2625+ec418553 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygem-mongo-doc | 2.11.3-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-mongo-doc | 2.5.1-2.module_el8.5.0+259+8cec6917 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygem-mongo-doc | 2.8.0-1.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-mongo-doc | 2.8.0-1.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.3-1.module_el8.5.0+118+1ab773e1 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-mysql2 | 0.4.10-4.module_el8.5.0+2625+ec418553 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.3-1.module_el8.4.0+2399+4e3a532a | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.2-1.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.2-1.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-mysql2 | 0.4.10-4.module_el8.5.0+259+8cec6917 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.3-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0.5.3-1.module_el8.5.0+118+1ab773e1 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0.5.2-1.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0.5.2-1.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0.4.10-4.module_el8.5.0+259+8cec6917 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0.4.10-4.module_el8.5.0+2625+ec418553 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0.5.3-1.module_el8.4.0+2399+4e3a532a | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0.5.3-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-net-telnet | 0.2.0-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-net-telnet | 0.1.1-107.module_el8.5.0+2625+ec418553 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygem-net-telnet | 0.2.0-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-net-telnet | 0.2.0-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-openssl | 2.1.2-137.module_el8.5.0+117+35d1289b | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-openssl | 2.1.2-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-openssl | 2.1.2-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-openssl | 2.1.2-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-openssl | 2.1.2-107.module_el8.5.0+2625+ec418553 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygem-pg | 1.0.0-2.module_el8.5.0+259+8cec6917 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygem-pg | 1.0.0-2.module_el8.5.0+2625+ec418553 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygem-pg | 1.1.4-1.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-pg | 1.1.4-1.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-pg | 1.2.3-1.module_el8.4.0+2399+4e3a532a | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-pg | 1.2.3-1.module_el8.5.0+118+1ab773e1 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-pg | 1.2.3-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-pg-doc | 1.2.3-1.module_el8.4.0+2399+4e3a532a | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-pg-doc | 1.2.3-1.module_el8.5.0+118+1ab773e1 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-pg-doc | 1.2.3-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-pg-doc | 1.0.0-2.module_el8.5.0+259+8cec6917 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygem-pg-doc | 1.0.0-2.module_el8.5.0+2625+ec418553 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygem-pg-doc | 1.1.4-1.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-pg-doc | 1.1.4-1.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-power_assert | 1.1.3-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-power_assert | 1.1.1-107.module_el8.5.0+2625+ec418553 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygem-power_assert | 1.1.7-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-power_assert | 1.1.3-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-psych | 3.1.0-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-psych | 3.1.0-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-psych | 3.1.0-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-psych | 3.1.0-137.module_el8.5.0+117+35d1289b | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-psych | 3.0.2-107.module_el8.5.0+2625+ec418553 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygem-rake | 12.3.3-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-rake | 13.0.1-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-rake | 12.3.3-107.module_el8.5.0+2625+ec418553 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygem-rake | 12.3.3-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-rdoc | 6.1.2.1-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-rdoc | 6.1.2.1-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-rdoc | 6.2.1.1-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-rdoc | 6.0.1.1-107.module_el8.5.0+2625+ec418553 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygem-test-unit | 3.2.7-107.module_el8.5.0+2625+ec418553 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygem-test-unit | 3.3.4-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-test-unit | 3.2.9-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-test-unit | 3.2.9-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-xmlrpc | 0.3.0-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-xmlrpc | 0.3.0-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-xmlrpc | 0.3.0-107.module_el8.5.0+2625+ec418553 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygem-xmlrpc | 0.3.0-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygems | 2.7.6.3-107.module_el8.5.0+2625+ec418553 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygems | 3.1.6-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygems | 3.0.3.1-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygems | 3.0.3.1-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygems-devel | 3.0.3.1-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygems-devel | 3.0.3.1-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygems-devel | 2.7.6.3-107.module_el8.5.0+2625+ec418553 | ALSA-2022:0545 |
| AlmaLinux:8 | rubygems-devel | 3.1.6-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| Debian:12 | rubygems | 3.3.5-1 | DEBIAN-CVE-2020-36327 |
| Debian:13 | rubygems | 3.3.5-1 | DEBIAN-CVE-2020-36327 |
| Debian:14 | rubygems | 3.3.5-1 | DEBIAN-CVE-2020-36327 |
| Rocky Linux:8 | ruby | 0:2.6.9-108.module+el8.5.0+738+032c9c02 | RLSA-2022:0543 |
| Rocky Linux:8 | ruby | 0:2.7.4-137.module+el8.4.0+629+f8f0bf91 | RLSA-2021:3020 |
| Rocky Linux:8 | ruby | 0:2.5.9-107.module+el8.4.0+592+03ff458a | RLSA-2022:0545 |
| Rocky Linux:8 | rubygem-abrt | 0:0.4.0-1.module+el8.4.0+594+11b6673a | RLSA-2021:3020 |
| Rocky Linux:8 | rubygem-abrt | 0:0.3.0-4.module+el8.4.0+592+03ff458a | RLSA-2022:0543 |
| Rocky Linux:8 | rubygem-abrt | 0:0.3.0-4.module+el8.3.0+167+5c390590 | RLSA-2022:0543 |
| Rocky Linux:8 | rubygem-abrt | 0:0.3.0-4.module+el8.5.0+738+032c9c02 | RLSA-2022:0543 |
| Rocky Linux:8 | rubygem-abrt | 0:0.3.0-4.module+el8.4.0+592+03ff458a | RLSA-2022:0545 |
| Rocky Linux:8 | rubygem-abrt | 0:0.3.0-4.module+el8.3.0+167+5c390590 | RLSA-2022:0545 |
| Rocky Linux:8 | rubygem-abrt | 0:0.3.0-4.module+el8.5.0+738+032c9c02 | RLSA-2022:0545 |
| Rocky Linux:8 | rubygem-abrt | 0:0.4.0-1.module+el8.5.0+668+665814fa | RLSA-2021:3020 |
| Rocky Linux:8 | rubygem-abrt | 0:0.4.0-1.module+el8.4.0+411+b946f28c | RLSA-2021:3020 |
| Rocky Linux:8 | rubygem-bson | 0:4.3.0-2.module+el8.3.0+167+5c390590 | RLSA-2022:0545 |
| Rocky Linux:8 | rubygem-bson | 0:4.8.1-1.module+el8.4.0+594+11b6673a | RLSA-2021:3020 |
| Rocky Linux:8 | rubygem-bson | 0:4.8.1-1.module+el8.4.0+411+b946f28c | RLSA-2021:3020 |
| Rocky Linux:8 | rubygem-bson | 0:4.5.0-1.module+el8.4.0+593+8d7f9f0c | RLSA-2022:0543 |
| Rocky Linux:8 | rubygem-bson | 0:4.5.0-1.module+el8.4.0+446+80b53620 | RLSA-2022:0543 |
| Rocky Linux:8 | rubygem-bson | 0:4.3.0-2.module+el8.4.0+592+03ff458a | RLSA-2022:0545 |
| Rocky Linux:8 | rubygem-bundler | 0:1.16.1-4.module+el8.5.0+739+43897a5e | RLSA-2022:0545 |
| Rocky Linux:8 | rubygem-bundler | 0:1.16.1-4.module+el8.6.0+992+fc951c18 | RLSA-2022:0545 |
| Rocky Linux:8 | rubygem-mongo | 0:2.8.0-1.module+el8.4.0+593+8d7f9f0c | RLSA-2022:0543 |
| Rocky Linux:8 | rubygem-mongo | 0:2.11.3-1.module+el8.4.0+594+11b6673a | RLSA-2021:3020 |
| Rocky Linux:8 | rubygem-mongo | 0:2.5.1-2.module+el8.4.0+592+03ff458a | RLSA-2022:0545 |
| Rocky Linux:8 | rubygem-mongo | 0:2.5.1-2.module+el8.4.0+349+3470f258 | RLSA-2022:0545 |
| Rocky Linux:8 | rubygem-mongo | 0:2.11.3-1.module+el8.4.0+411+b946f28c | RLSA-2021:3020 |
| Rocky Linux:8 | rubygem-mongo | 0:2.8.0-1.module+el8.4.0+446+80b53620 | RLSA-2022:0543 |
| Rocky Linux:8 | rubygem-mysql2 | 0:0.4.10-4.module+el8.5.0+739+43897a5e | RLSA-2022:0545 |
| Rocky Linux:8 | rubygem-mysql2 | 0:0.4.10-4.module+el8.3.0+167+5c390590 | RLSA-2022:0545 |
| Rocky Linux:8 | rubygem-mysql2 | 0:0.5.3-1.module+el8.4.0+594+11b6673a | RLSA-2021:3020 |
| Rocky Linux:8 | rubygem-mysql2 | 0:0.5.2-1.module+el8.4.0+446+80b53620 | RLSA-2022:0543 |
| Rocky Linux:8 | rubygem-mysql2 | 0:0.5.2-1.module+el8.5.0+738+032c9c02 | RLSA-2022:0543 |
| Rocky Linux:8 | rubygem-mysql2 | 0:0.5.2-1.module+el8.4.0+593+8d7f9f0c | RLSA-2022:0543 |
| Rocky Linux:8 | rubygem-mysql2 | 0:0.5.3-1.module+el8.4.0+411+b946f28c | RLSA-2021:3020 |
| Rocky Linux:8 | rubygem-mysql2 | 0:0.4.10-4.module+el8.4.0+592+03ff458a | RLSA-2022:0545 |
| Rocky Linux:8 | rubygem-mysql2 | 0:0.5.3-1.module+el8.5.0+668+665814fa | RLSA-2021:3020 |
| Rocky Linux:8 | rubygem-pg | 0:1.2.3-1.module+el8.4.0+594+11b6673a | RLSA-2021:3020 |
Affected products (as reported)
References
- https://github.com/rubygems/rubygems/issues/3982 x_refsource_MISC
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-24105 x_refsource_MISC
- https://bundler.io/blog/2021/02/15/a-more-secure-bundler-we-fixed-our-source-priorities.html x_refsource_MISC
- https://mensfeld.pl/2021/02/rubygems-dependency-confusion-attack-side-of-things/ x_refsource_MISC
- https://www.zofrex.com/blog/2021/04/29/bundler-still-vulnerable-dependency-confusion-cve-2020-36327/ x_refsource_MISC
- FEDORA-2021-36cdab1f8d vendor-advisory, x_refsource_FEDORA