Vulnerability · Published Aug 1, 2021 · Assigned by mitre
CVE-2021-32066
High 7.4
In plain English
A high-severity security flaw in the ruby package (AlmaLinux). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.9% (higher than 87% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)7.4High
Exploit odds (30 days)2.9%top 13.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. Net::IMAP does not raise an exception when StartTLS fails with an an unknown response, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a "StartTLS stripping attack."
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | ruby | 2.5.9-109.module_el8.5.0+2627+d9c243ca | ALSA-2022:0672 |
| AlmaLinux:8 | ruby | 2.5.9-109.module_el8.5.0+259+8cec6917 | ALSA-2022:0672 |
| AlmaLinux:8 | ruby | 2.7.4-137.module_el8.5.0+117+35d1289b | ALSA-2021:3020 |
| AlmaLinux:8 | ruby | 2.6.9-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | ruby | 2.6.9-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | ruby | 2.7.4-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | ruby-default-gems | 2.7.4-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | ruby-devel | 2.5.9-109.module_el8.5.0+2627+d9c243ca | ALSA-2022:0672 |
| AlmaLinux:8 | ruby-devel | 2.6.9-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | ruby-devel | 2.6.9-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | ruby-devel | 2.7.4-137.module_el8.5.0+117+35d1289b | ALSA-2021:3020 |
| AlmaLinux:8 | ruby-devel | 2.5.9-109.module_el8.5.0+259+8cec6917 | ALSA-2022:0672 |
| AlmaLinux:8 | ruby-devel | 2.7.4-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | ruby-doc | 2.7.4-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | ruby-doc | 2.6.9-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | ruby-doc | 2.5.9-109.module_el8.5.0+2627+d9c243ca | ALSA-2022:0672 |
| AlmaLinux:8 | ruby-doc | 2.5.9-109.module_el8.5.0+259+8cec6917 | ALSA-2022:0672 |
| AlmaLinux:8 | ruby-doc | 2.6.9-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | ruby-irb | 2.5.9-109.module_el8.5.0+2627+d9c243ca | ALSA-2022:0672 |
| AlmaLinux:8 | ruby-irb | 2.5.9-109.module_el8.5.0+259+8cec6917 | ALSA-2022:0672 |
| AlmaLinux:8 | ruby-libs | 2.5.9-109.module_el8.5.0+2627+d9c243ca | ALSA-2022:0672 |
| AlmaLinux:8 | ruby-libs | 2.7.4-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | ruby-libs | 2.7.4-137.module_el8.5.0+117+35d1289b | ALSA-2021:3020 |
| AlmaLinux:8 | ruby-libs | 2.6.9-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | ruby-libs | 2.6.9-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | ruby-libs | 2.5.9-109.module_el8.5.0+259+8cec6917 | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-abrt | 0.3.0-4.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-abrt | 0.4.0-1.module_el8.5.0+118+1ab773e1 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-abrt | 0.4.0-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-abrt | 0.4.0-1.module_el8.4.0+2399+4e3a532a | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-abrt | 0.3.0-4.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-abrt | 0.3.0-4.module_el8.5.0+2625+ec418553 | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-abrt | 0.3.0-4.module_el8.5.0+259+8cec6917 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.3.0-4.module_el8.5.0+2625+ec418553 | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.4.0-1.module_el8.5.0+118+1ab773e1 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.4.0-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.4.0-1.module_el8.4.0+2399+4e3a532a | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.3.0-4.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.3.0-4.module_el8.5.0+259+8cec6917 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.3.0-4.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-bigdecimal | 1.3.4-109.module_el8.5.0+259+8cec6917 | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-bigdecimal | 2.0.0-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-bigdecimal | 1.4.1-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-bigdecimal | 1.4.1-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-bigdecimal | 2.0.0-137.module_el8.5.0+117+35d1289b | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-bigdecimal | 1.3.4-109.module_el8.5.0+2627+d9c243ca | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-bson | 4.8.1-1.module_el8.4.0+2399+4e3a532a | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-bson | 4.8.1-1.module_el8.5.0+117+35d1289b | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-bson | 4.3.0-2.module_el8.5.0+2625+ec418553 | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-bson | 4.3.0-2.module_el8.5.0+259+8cec6917 | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-bson | 4.5.0-1.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-bson | 4.5.0-1.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-bson | 4.8.1-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-bson-doc | 4.5.0-1.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-bson-doc | 4.8.1-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-bson-doc | 4.3.0-2.module_el8.5.0+2625+ec418553 | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-bson-doc | 4.5.0-1.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-bundler | 1.17.2-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-bundler | 2.2.24-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-bundler | 1.17.2-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-bundler | 1.16.1-4.module_el8.5.0+2625+ec418553 | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-bundler-doc | 1.16.1-4.module_el8.5.0+2625+ec418553 | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-did_you_mean | 1.2.0-109.module_el8.5.0+2627+d9c243ca | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-did_you_mean | 1.2.0-109.module_el8.5.0+259+8cec6917 | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-did_you_mean | 1.3.0-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-did_you_mean | 1.3.0-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-io-console | 0.5.6-137.module_el8.5.0+117+35d1289b | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-io-console | 0.4.6-109.module_el8.5.0+2627+d9c243ca | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-io-console | 0.4.6-109.module_el8.5.0+259+8cec6917 | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-io-console | 0.4.7-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-io-console | 0.4.7-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-io-console | 0.5.6-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-irb | 1.0.0-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-irb | 1.2.6-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-irb | 1.0.0-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-json | 2.1.0-109.module_el8.5.0+259+8cec6917 | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-json | 2.1.0-109.module_el8.5.0+2627+d9c243ca | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-json | 2.1.0-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-json | 2.1.0-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-json | 2.3.0-137.module_el8.5.0+117+35d1289b | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-json | 2.3.0-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-minitest | 5.10.3-109.module_el8.5.0+2627+d9c243ca | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-minitest | 5.11.3-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-minitest | 5.11.3-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-minitest | 5.10.3-109.module_el8.5.0+259+8cec6917 | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-minitest | 5.13.0-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-mongo | 2.8.0-1.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-mongo | 2.11.3-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-mongo | 2.8.0-1.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-mongo | 2.5.1-2.module_el8.5.0+2625+ec418553 | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-mongo-doc | 2.11.3-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-mongo-doc | 2.8.0-1.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-mongo-doc | 2.8.0-1.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-mongo-doc | 2.5.1-2.module_el8.5.0+2625+ec418553 | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.2-1.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-mysql2 | 0.4.10-4.module_el8.5.0+2625+ec418553 | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.2-1.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-mysql2 | 0.4.10-4.module_el8.5.0+259+8cec6917 | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.3-1.module_el8.4.0+2399+4e3a532a | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.3-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.3-1.module_el8.5.0+118+1ab773e1 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0.5.2-1.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0.5.3-1.module_el8.5.0+118+1ab773e1 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0.5.3-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0.5.3-1.module_el8.4.0+2399+4e3a532a | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0.4.10-4.module_el8.5.0+2625+ec418553 | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0.5.2-1.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-net-telnet | 0.2.0-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-net-telnet | 0.1.1-109.module_el8.5.0+2627+d9c243ca | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-net-telnet | 0.1.1-109.module_el8.5.0+259+8cec6917 | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-net-telnet | 0.2.0-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-net-telnet | 0.2.0-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-openssl | 2.1.2-137.module_el8.5.0+117+35d1289b | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-openssl | 2.1.2-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-openssl | 2.1.2-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-openssl | 2.1.2-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-openssl | 2.1.2-109.module_el8.5.0+259+8cec6917 | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-openssl | 2.1.2-109.module_el8.5.0+2627+d9c243ca | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-pg | 1.1.4-1.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-pg | 1.0.0-2.module_el8.5.0+2625+ec418553 | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-pg | 1.2.3-1.module_el8.5.0+118+1ab773e1 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-pg | 1.2.3-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-pg | 1.2.3-1.module_el8.4.0+2399+4e3a532a | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-pg | 1.0.0-2.module_el8.5.0+259+8cec6917 | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-pg | 1.1.4-1.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-pg-doc | 1.1.4-1.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-pg-doc | 1.1.4-1.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-pg-doc | 1.0.0-2.module_el8.5.0+2625+ec418553 | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-pg-doc | 1.2.3-1.module_el8.4.0+2399+4e3a532a | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-pg-doc | 1.2.3-1.module_el8.5.0+118+1ab773e1 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-pg-doc | 1.2.3-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-power_assert | 1.1.7-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-power_assert | 1.1.1-109.module_el8.5.0+2627+d9c243ca | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-power_assert | 1.1.1-109.module_el8.5.0+259+8cec6917 | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-power_assert | 1.1.3-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-power_assert | 1.1.3-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-psych | 3.1.0-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-psych | 3.0.2-109.module_el8.5.0+2627+d9c243ca | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-psych | 3.0.2-109.module_el8.5.0+259+8cec6917 | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-psych | 3.1.0-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-psych | 3.1.0-137.module_el8.5.0+117+35d1289b | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-psych | 3.1.0-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-rake | 13.0.1-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-rake | 12.3.3-109.module_el8.5.0+2627+d9c243ca | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-rake | 12.3.3-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-rake | 12.3.3-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-rdoc | 6.1.2.1-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-rdoc | 6.1.2.1-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-rdoc | 6.2.1.1-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-rdoc | 6.0.1.1-109.module_el8.5.0+259+8cec6917 | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-rdoc | 6.0.1.1-109.module_el8.5.0+2627+d9c243ca | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-test-unit | 3.2.9-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-test-unit | 3.2.9-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-test-unit | 3.3.4-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-test-unit | 3.2.7-109.module_el8.5.0+259+8cec6917 | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-test-unit | 3.2.7-109.module_el8.5.0+2627+d9c243ca | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-xmlrpc | 0.3.0-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-xmlrpc | 0.3.0-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygem-xmlrpc | 0.3.0-109.module_el8.5.0+2627+d9c243ca | ALSA-2022:0672 |
| AlmaLinux:8 | rubygem-xmlrpc | 0.3.0-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygems | 3.0.3.1-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygems | 2.7.6.3-109.module_el8.5.0+2627+d9c243ca | ALSA-2022:0672 |
| AlmaLinux:8 | rubygems | 3.0.3.1-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygems | 2.7.6.3-109.module_el8.5.0+259+8cec6917 | ALSA-2022:0672 |
| AlmaLinux:8 | rubygems | 3.1.6-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygems-devel | 3.0.3.1-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygems-devel | 2.7.6.3-109.module_el8.5.0+259+8cec6917 | ALSA-2022:0672 |
| AlmaLinux:8 | rubygems-devel | 2.7.6.3-109.module_el8.5.0+2627+d9c243ca | ALSA-2022:0672 |
| AlmaLinux:8 | rubygems-devel | 3.1.6-137.module_el8.4.0+2515+f744ca41 | ALSA-2021:3020 |
| AlmaLinux:8 | rubygems-devel | 3.0.3.1-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| Alpine:v3.20 | ruby | 2.7.4-r0 | ALPINE-CVE-2021-32066 |
| Alpine:v3.21 | ruby | 2.7.4-r0 | ALPINE-CVE-2021-32066 |
| Alpine:v3.22 | ruby | 2.7.4-r0 | ALPINE-CVE-2021-32066 |
| Alpine:v3.23 | ruby | 2.7.4-r0 | ALPINE-CVE-2021-32066 |
| Alpine:v3.24 | ruby | 2.7.4-r0 | ALPINE-CVE-2021-32066 |
| Debian:12 | jruby | 9.3.9.0+ds-1 | DEBIAN-CVE-2021-32066 |
| Debian:13 | jruby | 9.3.9.0+ds-1 | DEBIAN-CVE-2021-32066 |
| Debian:14 | jruby | 9.3.9.0+ds-1 | DEBIAN-CVE-2021-32066 |
| Rocky Linux:8 | ruby | 0:2.7.4-137.module+el8.4.0+629+f8f0bf91 | RLSA-2021:3020 |
| Rocky Linux:8 | ruby | 0:2.6.9-108.module+el8.5.0+738+032c9c02 | RLSA-2022:0543 |
| Rocky Linux:8 | ruby | 0:2.5.9-109.module+el8.5.0+740+b85cbe0d | RLSA-2022:0672 |
| Rocky Linux:8 | rubygem-abrt | 0:0.3.0-4.module+el8.5.0+738+032c9c02 | RLSA-2022:0672 |
| Rocky Linux:8 | rubygem-abrt | 0:0.4.0-1.module+el8.4.0+594+11b6673a | RLSA-2021:3020 |
| Rocky Linux:8 | rubygem-abrt | 0:0.4.0-1.module+el8.4.0+411+b946f28c | RLSA-2021:3020 |
| Rocky Linux:8 | rubygem-abrt | 0:0.3.0-4.module+el8.3.0+167+5c390590 | RLSA-2022:0543 |
| Rocky Linux:8 | rubygem-abrt | 0:0.3.0-4.module+el8.5.0+738+032c9c02 | RLSA-2022:0543 |
| Rocky Linux:8 | rubygem-abrt | 0:0.4.0-1.module+el8.5.0+668+665814fa | RLSA-2021:3020 |
| Rocky Linux:8 | rubygem-abrt | 0:0.3.0-4.module+el8.4.0+592+03ff458a | RLSA-2022:0543 |
| Rocky Linux:8 | rubygem-abrt | 0:0.3.0-4.module+el8.3.0+167+5c390590 | RLSA-2022:0672 |
| Rocky Linux:8 | rubygem-abrt | 0:0.3.0-4.module+el8.4.0+592+03ff458a | RLSA-2022:0672 |
| Rocky Linux:8 | rubygem-bson | 0:4.3.0-2.module+el8.4.0+592+03ff458a | RLSA-2022:0672 |
| Rocky Linux:8 | rubygem-bson | 0:4.8.1-1.module+el8.4.0+594+11b6673a | RLSA-2021:3020 |
| Rocky Linux:8 | rubygem-bson | 0:4.8.1-1.module+el8.4.0+411+b946f28c | RLSA-2021:3020 |
| Rocky Linux:8 | rubygem-bson | 0:4.5.0-1.module+el8.4.0+593+8d7f9f0c | RLSA-2022:0543 |
| Rocky Linux:8 | rubygem-bson | 0:4.5.0-1.module+el8.4.0+446+80b53620 | RLSA-2022:0543 |
| Rocky Linux:8 | rubygem-bson | 0:4.3.0-2.module+el8.3.0+167+5c390590 | RLSA-2022:0672 |
| Rocky Linux:8 | rubygem-bundler | 0:1.16.1-4.module+el8.6.0+992+fc951c18 | RLSA-2022:0672 |
| Rocky Linux:8 | rubygem-bundler | 0:1.16.1-4.module+el8.5.0+739+43897a5e | RLSA-2022:0672 |
| Rocky Linux:8 | rubygem-mongo | 0:2.5.1-2.module+el8.4.0+349+3470f258 | RLSA-2022:0672 |
| Rocky Linux:8 | rubygem-mongo | 0:2.8.0-1.module+el8.4.0+446+80b53620 | RLSA-2022:0543 |
Affected products (as reported)
References
- https://hackerone.com/reports/1178562
- [debian-lts-announce] 20211013 [SECURITY] [DLA 2780-1] ruby2.3 security update mailing-list
- https://www.oracle.com/security-alerts/cpuapr2022.html
- https://security.netapp.com/advisory/ntap-20210902-0004/
- https://www.ruby-lang.org/en/news/2021/07/07/starttls-stripping-in-net-imap/
- https://github.com/ruby/ruby/commit/a21a3b7d23704a01d34bd79d09dc37897e00922a
- [debian-lts-announce] 20230430 [SECURITY] [DLA 3408-1] jruby security update mailing-list
- GLSA-202401-27 vendor-advisory