Home

CVE-2020-36327

Description

Bundler 1.16.0 through 2.2.9 and 2.2.11 through 2.2.16 sometimes chooses a dependency source based on the highest gem version number, which means that a rogue gem found at a public source may be chosen, even if the intended choice was a private gem that is a dependency of another private gem that is explicitly depended on by the application. NOTE: it is not correct to use CVE-2021-24105 for every Dependency Confusion issue in every product.

Risk Information

Base Score
8.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
19.778

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2020-36327 are fixed in Ruby-bundler 2.2.10Windows
Vulnerabilities CVE-2020-36327 are fixed in Ruby-bundler 2.2.18Windows
Ruby update (ELSA-2021-3020) ruby-2.7.4-137.module+el8.4.0+20269+fcbf533e.i686.rpmLinux
Ruby update (ELSA-2021-3020) ruby-2.7.4-137.module+el8.4.0+20269+fcbf533e.x86_64.rpmLinux
Ruby-default-gems update (ELSA-2021-3020) ruby-default-gems-2.7.4-137.module+el8.4.0+20269+fcbf533e.noarch.rpmLinux
Ruby-devel update (ELSA-2021-3020) ruby-devel-2.7.4-137.module+el8.4.0+20269+fcbf533e.i686.rpmLinux
Ruby-devel update (ELSA-2021-3020) ruby-devel-2.7.4-137.module+el8.4.0+20269+fcbf533e.x86_64.rpmLinux
Ruby-doc update (ELSA-2021-3020) ruby-doc-2.7.4-137.module+el8.4.0+20269+fcbf533e.noarch.rpmLinux
Ruby-libs update (ELSA-2021-3020) ruby-libs-2.7.4-137.module+el8.4.0+20269+fcbf533e.i686.rpmLinux
Ruby-libs update (ELSA-2021-3020) ruby-libs-2.7.4-137.module+el8.4.0+20269+fcbf533e.x86_64.rpmLinux
Rubygem-abrt update (ELSA-2021-3020) rubygem-abrt-0.4.0-1.module+el8.3.0+7760+537395ec.noarch.rpmLinux
Rubygem-abrt-doc update (ELSA-2021-3020) rubygem-abrt-doc-0.4.0-1.module+el8.3.0+7760+537395ec.noarch.rpmLinux
Rubygem-bigdecimal update (ELSA-2021-3020) rubygem-bigdecimal-2.0.0-137.module+el8.4.0+20269+fcbf533e.i686.rpmLinux
Rubygem-bigdecimal update (ELSA-2021-3020) rubygem-bigdecimal-2.0.0-137.module+el8.4.0+20269+fcbf533e.x86_64.rpmLinux
Rubygem-bson update (ELSA-2021-3020) rubygem-bson-4.8.1-1.module+el8.4.0+20239+cbf59dc8.x86_64.rpmLinux
Rubygem-bson-doc update (ELSA-2021-3020) rubygem-bson-doc-4.8.1-1.module+el8.4.0+20239+cbf59dc8.noarch.rpmLinux
Rubygem-bundler update (ELSA-2021-3020) rubygem-bundler-2.2.24-137.module+el8.4.0+20269+fcbf533e.noarch.rpmLinux
Rubygem-io-console update (ELSA-2021-3020) rubygem-io-console-0.5.6-137.module+el8.4.0+20269+fcbf533e.i686.rpmLinux
Rubygem-io-console update (ELSA-2021-3020) rubygem-io-console-0.5.6-137.module+el8.4.0+20269+fcbf533e.x86_64.rpmLinux
Rubygem-irb update (ELSA-2021-3020) rubygem-irb-1.2.6-137.module+el8.4.0+20269+fcbf533e.noarch.rpmLinux
Rubygem-json update (ELSA-2021-3020) rubygem-json-2.3.0-137.module+el8.4.0+20269+fcbf533e.i686.rpmLinux
Rubygem-json update (ELSA-2021-3020) rubygem-json-2.3.0-137.module+el8.4.0+20269+fcbf533e.x86_64.rpmLinux
Rubygem-minitest update (ELSA-2021-3020) rubygem-minitest-5.13.0-137.module+el8.4.0+20269+fcbf533e.noarch.rpmLinux
Rubygem-mongo update (ELSA-2021-3020) rubygem-mongo-2.11.3-1.module+el8.3.0+7760+537395ec.noarch.rpmLinux
Rubygem-mongo-doc update (ELSA-2021-3020) rubygem-mongo-doc-2.11.3-1.module+el8.3.0+7760+537395ec.noarch.rpmLinux
Rubygem-mysql2 update (ELSA-2021-3020) rubygem-mysql2-0.5.3-1.module+el8.4.0+20239+cbf59dc8.x86_64.rpmLinux
Rubygem-mysql2-doc update (ELSA-2021-3020) rubygem-mysql2-doc-0.5.3-1.module+el8.4.0+20239+cbf59dc8.noarch.rpmLinux
Rubygem-net-telnet update (ELSA-2021-3020) rubygem-net-telnet-0.2.0-137.module+el8.4.0+20269+fcbf533e.noarch.rpmLinux
Rubygem-openssl update (ELSA-2021-3020) rubygem-openssl-2.1.2-137.module+el8.4.0+20269+fcbf533e.i686.rpmLinux
Rubygem-openssl update (ELSA-2021-3020) rubygem-openssl-2.1.2-137.module+el8.4.0+20269+fcbf533e.x86_64.rpmLinux
Rubygem-pg update (ELSA-2021-3020) rubygem-pg-1.2.3-1.module+el8.4.0+20239+cbf59dc8.x86_64.rpmLinux
Rubygem-pg-doc update (ELSA-2021-3020) rubygem-pg-doc-1.2.3-1.module+el8.4.0+20239+cbf59dc8.noarch.rpmLinux
Rubygem-power_assert update (ELSA-2021-3020) rubygem-power_assert-1.1.7-137.module+el8.4.0+20269+fcbf533e.noarch.rpmLinux
Rubygem-psych update (ELSA-2021-3020) rubygem-psych-3.1.0-137.module+el8.4.0+20269+fcbf533e.i686.rpmLinux
Rubygem-psych update (ELSA-2021-3020) rubygem-psych-3.1.0-137.module+el8.4.0+20269+fcbf533e.x86_64.rpmLinux
Rubygem-rake update (ELSA-2021-3020) rubygem-rake-13.0.1-137.module+el8.4.0+20269+fcbf533e.noarch.rpmLinux
Rubygem-rdoc update (ELSA-2021-3020) rubygem-rdoc-6.2.1.1-137.module+el8.4.0+20269+fcbf533e.noarch.rpmLinux
Rubygem-test-unit update (ELSA-2021-3020) rubygem-test-unit-3.3.4-137.module+el8.4.0+20269+fcbf533e.noarch.rpmLinux
Rubygem-xmlrpc update (ELSA-2021-3020) rubygem-xmlrpc-0.3.0-137.module+el8.4.0+20269+fcbf533e.noarch.rpmLinux
Rubygems update (ELSA-2021-3020) rubygems-3.1.6-137.module+el8.4.0+20269+fcbf533e.noarch.rpmLinux
Rubygems-devel update (ELSA-2021-3020) rubygems-devel-3.1.6-137.module+el8.4.0+20269+fcbf533e.noarch.rpmLinux
(RHSA-2022:0543) ruby:2.6 security update ruby-2.6.9-108.module+el8.5.0+13719+08a8ba32.i686.rpmLinux
(RHSA-2022:0543) ruby:2.6 security update ruby-2.6.9-108.module+el8.5.0+13719+08a8ba32.x86_64.rpmLinux
(RHSA-2022:0543) ruby:2.6 security update ruby-debugsource-2.6.9-108.module+el8.5.0+13719+08a8ba32.i686.rpmLinux
(RHSA-2022:0543) ruby:2.6 security update ruby-debugsource-2.6.9-108.module+el8.5.0+13719+08a8ba32.x86_64.rpmLinux
(RHSA-2022:0543) ruby:2.6 security update ruby-devel-2.6.9-108.module+el8.5.0+13719+08a8ba32.i686.rpmLinux
(RHSA-2022:0543) ruby:2.6 security update ruby-devel-2.6.9-108.module+el8.5.0+13719+08a8ba32.x86_64.rpmLinux
(RHSA-2022:0543) ruby:2.6 security update ruby-doc-2.6.9-108.module+el8.5.0+13719+08a8ba32.noarch.rpmLinux
(RHSA-2022:0543) ruby:2.6 security update ruby-libs-2.6.9-108.module+el8.5.0+13719+08a8ba32.i686.rpmLinux
(RHSA-2022:0543) ruby:2.6 security update ruby-libs-2.6.9-108.module+el8.5.0+13719+08a8ba32.x86_64.rpmLinux
(RHSA-2022:0543) ruby:2.6 security update rubygem-bigdecimal-1.4.1-108.module+el8.5.0+13719+08a8ba32.i686.rpmLinux
(RHSA-2022:0543) ruby:2.6 security update rubygem-bigdecimal-1.4.1-108.module+el8.5.0+13719+08a8ba32.x86_64.rpmLinux
(RHSA-2022:0543) ruby:2.6 security update rubygem-bundler-1.17.2-108.module+el8.5.0+13719+08a8ba32.noarch.rpmLinux
(RHSA-2022:0543) ruby:2.6 security update rubygem-did_you_mean-1.3.0-108.module+el8.5.0+13719+08a8ba32.noarch.rpmLinux
(RHSA-2022:0543) ruby:2.6 security update rubygem-io-console-0.4.7-108.module+el8.5.0+13719+08a8ba32.i686.rpmLinux
(RHSA-2022:0543) ruby:2.6 security update rubygem-io-console-0.4.7-108.module+el8.5.0+13719+08a8ba32.x86_64.rpmLinux
(RHSA-2022:0543) ruby:2.6 security update rubygem-irb-1.0.0-108.module+el8.5.0+13719+08a8ba32.noarch.rpmLinux
(RHSA-2022:0543) ruby:2.6 security update rubygem-json-2.1.0-108.module+el8.5.0+13719+08a8ba32.i686.rpmLinux
(RHSA-2022:0543) ruby:2.6 security update rubygem-json-2.1.0-108.module+el8.5.0+13719+08a8ba32.x86_64.rpmLinux
(RHSA-2022:0543) ruby:2.6 security update rubygem-minitest-5.11.3-108.module+el8.5.0+13719+08a8ba32.noarch.rpmLinux
(RHSA-2022:0543) ruby:2.6 security update rubygem-net-telnet-0.2.0-108.module+el8.5.0+13719+08a8ba32.noarch.rpmLinux
(RHSA-2022:0543) ruby:2.6 security update rubygem-openssl-2.1.2-108.module+el8.5.0+13719+08a8ba32.i686.rpmLinux
(RHSA-2022:0543) ruby:2.6 security update rubygem-openssl-2.1.2-108.module+el8.5.0+13719+08a8ba32.x86_64.rpmLinux
(RHSA-2022:0543) ruby:2.6 security update rubygem-power_assert-1.1.3-108.module+el8.5.0+13719+08a8ba32.noarch.rpmLinux
(RHSA-2022:0543) ruby:2.6 security update rubygem-psych-3.1.0-108.module+el8.5.0+13719+08a8ba32.i686.rpmLinux
(RHSA-2022:0543) ruby:2.6 security update rubygem-psych-3.1.0-108.module+el8.5.0+13719+08a8ba32.x86_64.rpmLinux
(RHSA-2022:0543) ruby:2.6 security update rubygem-rake-12.3.3-108.module+el8.5.0+13719+08a8ba32.noarch.rpmLinux
(RHSA-2022:0543) ruby:2.6 security update rubygem-test-unit-3.2.9-108.module+el8.5.0+13719+08a8ba32.noarch.rpmLinux
(RHSA-2022:0543) ruby:2.6 security update rubygem-xmlrpc-0.3.0-108.module+el8.5.0+13719+08a8ba32.noarch.rpmLinux
(RHSA-2022:0543) ruby:2.6 security update rubygems-3.0.3.1-108.module+el8.5.0+13719+08a8ba32.noarch.rpmLinux
(RHSA-2022:0543) ruby:2.6 security update rubygems-devel-3.0.3.1-108.module+el8.5.0+13719+08a8ba32.noarch.rpmLinux
(RHSA-2022:0545) ruby:2.5 security update ruby-2.5.9-107.module+el8.5.0+13840+ec418553.i686.rpmLinux
(RHSA-2022:0545) ruby:2.5 security update ruby-2.5.9-107.module+el8.5.0+13840+ec418553.x86_64.rpmLinux
(RHSA-2022:0545) ruby:2.5 security update ruby-debugsource-2.5.9-107.module+el8.5.0+13840+ec418553.i686.rpmLinux
(RHSA-2022:0545) ruby:2.5 security update ruby-debugsource-2.5.9-107.module+el8.5.0+13840+ec418553.x86_64.rpmLinux
(RHSA-2022:0545) ruby:2.5 security update ruby-devel-2.5.9-107.module+el8.5.0+13840+ec418553.i686.rpmLinux
(RHSA-2022:0545) ruby:2.5 security update ruby-devel-2.5.9-107.module+el8.5.0+13840+ec418553.x86_64.rpmLinux
(RHSA-2022:0545) ruby:2.5 security update ruby-doc-2.5.9-107.module+el8.5.0+13840+ec418553.noarch.rpmLinux
(RHSA-2022:0545) ruby:2.5 security update ruby-irb-2.5.9-107.module+el8.5.0+13840+ec418553.noarch.rpmLinux
(RHSA-2022:0545) ruby:2.5 security update ruby-libs-2.5.9-107.module+el8.5.0+13840+ec418553.i686.rpmLinux
(RHSA-2022:0545) ruby:2.5 security update ruby-libs-2.5.9-107.module+el8.5.0+13840+ec418553.x86_64.rpmLinux
(RHSA-2022:0545) ruby:2.5 security update rubygem-bigdecimal-1.3.4-107.module+el8.5.0+13840+ec418553.i686.rpmLinux
(RHSA-2022:0545) ruby:2.5 security update rubygem-bigdecimal-1.3.4-107.module+el8.5.0+13840+ec418553.x86_64.rpmLinux
(RHSA-2022:0545) ruby:2.5 security update rubygem-bundler-1.16.1-4.module+el8.5.0+13840+ec418553.noarch.rpmLinux
(RHSA-2022:0545) ruby:2.5 security update rubygem-bundler-doc-1.16.1-4.module+el8.5.0+13840+ec418553.noarch.rpmLinux
(RHSA-2022:0545) ruby:2.5 security update rubygem-did_you_mean-1.2.0-107.module+el8.5.0+13840+ec418553.noarch.rpmLinux
(RHSA-2022:0545) ruby:2.5 security update rubygem-io-console-0.4.6-107.module+el8.5.0+13840+ec418553.i686.rpmLinux
(RHSA-2022:0545) ruby:2.5 security update rubygem-io-console-0.4.6-107.module+el8.5.0+13840+ec418553.x86_64.rpmLinux
(RHSA-2022:0545) ruby:2.5 security update rubygem-json-2.1.0-107.module+el8.5.0+13840+ec418553.i686.rpmLinux
(RHSA-2022:0545) ruby:2.5 security update rubygem-json-2.1.0-107.module+el8.5.0+13840+ec418553.x86_64.rpmLinux
(RHSA-2022:0545) ruby:2.5 security update rubygem-minitest-5.10.3-107.module+el8.5.0+13840+ec418553.noarch.rpmLinux
(RHSA-2022:0545) ruby:2.5 security update rubygem-net-telnet-0.1.1-107.module+el8.5.0+13840+ec418553.noarch.rpmLinux
(RHSA-2022:0545) ruby:2.5 security update rubygem-openssl-2.1.2-107.module+el8.5.0+13840+ec418553.i686.rpmLinux
(RHSA-2022:0545) ruby:2.5 security update rubygem-openssl-2.1.2-107.module+el8.5.0+13840+ec418553.x86_64.rpmLinux
(RHSA-2022:0545) ruby:2.5 security update rubygem-power_assert-1.1.1-107.module+el8.5.0+13840+ec418553.noarch.rpmLinux
(RHSA-2022:0545) ruby:2.5 security update rubygem-psych-3.0.2-107.module+el8.5.0+13840+ec418553.i686.rpmLinux
(RHSA-2022:0545) ruby:2.5 security update rubygem-psych-3.0.2-107.module+el8.5.0+13840+ec418553.x86_64.rpmLinux
(RHSA-2022:0545) ruby:2.5 security update rubygem-rake-12.3.3-107.module+el8.5.0+13840+ec418553.noarch.rpmLinux
(RHSA-2022:0545) ruby:2.5 security update rubygem-test-unit-3.2.7-107.module+el8.5.0+13840+ec418553.noarch.rpmLinux
(RHSA-2022:0545) ruby:2.5 security update rubygem-xmlrpc-0.3.0-107.module+el8.5.0+13840+ec418553.noarch.rpmLinux
Ruby update (ELSA-2022-0543) ruby-2.6.9-108.module+el8.5.0+20495+db24e7b4.i686.rpmLinux
Ruby update (ELSA-2022-0543) ruby-2.6.9-108.module+el8.5.0+20495+db24e7b4.x86_64.rpmLinux
Ruby-devel update (ELSA-2022-0543) ruby-devel-2.6.9-108.module+el8.5.0+20495+db24e7b4.i686.rpmLinux
Ruby-devel update (ELSA-2022-0543) ruby-devel-2.6.9-108.module+el8.5.0+20495+db24e7b4.x86_64.rpmLinux
Ruby-doc update (ELSA-2022-0543) ruby-doc-2.6.9-108.module+el8.5.0+20495+db24e7b4.noarch.rpmLinux
Ruby-libs update (ELSA-2022-0543) ruby-libs-2.6.9-108.module+el8.5.0+20495+db24e7b4.i686.rpmLinux
Ruby-libs update (ELSA-2022-0543) ruby-libs-2.6.9-108.module+el8.5.0+20495+db24e7b4.x86_64.rpmLinux
Rubygem-abrt update (ELSA-2022-0543) rubygem-abrt-0.3.0-4.module+el8.1.0+5406+ce01f9b9.noarch.rpmLinux
Rubygem-abrt-doc update (ELSA-2022-0543) rubygem-abrt-doc-0.3.0-4.module+el8.1.0+5406+ce01f9b9.noarch.rpmLinux
Rubygem-bigdecimal update (ELSA-2022-0543) rubygem-bigdecimal-1.4.1-108.module+el8.5.0+20495+db24e7b4.i686.rpmLinux
Rubygem-bigdecimal update (ELSA-2022-0543) rubygem-bigdecimal-1.4.1-108.module+el8.5.0+20495+db24e7b4.x86_64.rpmLinux
Rubygem-bson update (ELSA-2022-0543) rubygem-bson-4.5.0-1.module+el8.4.0+20235+1e5b8be3.x86_64.rpmLinux
Rubygem-bson-doc update (ELSA-2022-0543) rubygem-bson-doc-4.5.0-1.module+el8.4.0+20235+1e5b8be3.noarch.rpmLinux
Rubygem-bundler update (ELSA-2022-0543) rubygem-bundler-1.17.2-108.module+el8.5.0+20495+db24e7b4.noarch.rpmLinux
Rubygem-did_you_mean update (ELSA-2022-0543) rubygem-did_you_mean-1.3.0-108.module+el8.5.0+20495+db24e7b4.noarch.rpmLinux
Rubygem-io-console update (ELSA-2022-0543) rubygem-io-console-0.4.7-108.module+el8.5.0+20495+db24e7b4.i686.rpmLinux
Rubygem-io-console update (ELSA-2022-0543) rubygem-io-console-0.4.7-108.module+el8.5.0+20495+db24e7b4.x86_64.rpmLinux
Rubygem-irb update (ELSA-2022-0543) rubygem-irb-1.0.0-108.module+el8.5.0+20495+db24e7b4.noarch.rpmLinux
Rubygem-json update (ELSA-2022-0543) rubygem-json-2.1.0-108.module+el8.5.0+20495+db24e7b4.i686.rpmLinux
Rubygem-json update (ELSA-2022-0543) rubygem-json-2.1.0-108.module+el8.5.0+20495+db24e7b4.x86_64.rpmLinux
Rubygem-minitest update (ELSA-2022-0543) rubygem-minitest-5.11.3-108.module+el8.5.0+20495+db24e7b4.noarch.rpmLinux
Rubygem-mongo update (ELSA-2022-0543) rubygem-mongo-2.8.0-1.module+el8.1.0+5406+ce01f9b9.noarch.rpmLinux
Rubygem-mongo-doc update (ELSA-2022-0543) rubygem-mongo-doc-2.8.0-1.module+el8.1.0+5406+ce01f9b9.noarch.rpmLinux
Rubygem-mysql2 update (ELSA-2022-0543) rubygem-mysql2-0.5.2-1.module+el8.4.0+20235+1e5b8be3.x86_64.rpmLinux
Rubygem-mysql2-doc update (ELSA-2022-0543) rubygem-mysql2-doc-0.5.2-1.module+el8.4.0+20235+1e5b8be3.noarch.rpmLinux
Rubygem-net-telnet update (ELSA-2022-0543) rubygem-net-telnet-0.2.0-108.module+el8.5.0+20495+db24e7b4.noarch.rpmLinux
Rubygem-openssl update (ELSA-2022-0543) rubygem-openssl-2.1.2-108.module+el8.5.0+20495+db24e7b4.i686.rpmLinux
Rubygem-openssl update (ELSA-2022-0543) rubygem-openssl-2.1.2-108.module+el8.5.0+20495+db24e7b4.x86_64.rpmLinux
Rubygem-pg update (ELSA-2022-0543) rubygem-pg-1.1.4-1.module+el8.4.0+20235+1e5b8be3.x86_64.rpmLinux
Rubygem-pg-doc update (ELSA-2022-0543) rubygem-pg-doc-1.1.4-1.module+el8.4.0+20235+1e5b8be3.noarch.rpmLinux
Rubygem-power_assert update (ELSA-2022-0543) rubygem-power_assert-1.1.3-108.module+el8.5.0+20495+db24e7b4.noarch.rpmLinux
Rubygem-psych update (ELSA-2022-0543) rubygem-psych-3.1.0-108.module+el8.5.0+20495+db24e7b4.i686.rpmLinux
Rubygem-psych update (ELSA-2022-0543) rubygem-psych-3.1.0-108.module+el8.5.0+20495+db24e7b4.x86_64.rpmLinux
Rubygem-rake update (ELSA-2022-0543) rubygem-rake-12.3.3-108.module+el8.5.0+20495+db24e7b4.noarch.rpmLinux
Rubygem-rdoc update (ELSA-2022-0543) rubygem-rdoc-6.1.2.1-108.module+el8.5.0+20495+db24e7b4.noarch.rpmLinux
Rubygem-test-unit update (ELSA-2022-0543) rubygem-test-unit-3.2.9-108.module+el8.5.0+20495+db24e7b4.noarch.rpmLinux
Rubygem-xmlrpc update (ELSA-2022-0543) rubygem-xmlrpc-0.3.0-108.module+el8.5.0+20495+db24e7b4.noarch.rpmLinux
Rubygems update (ELSA-2022-0543) rubygems-3.0.3.1-108.module+el8.5.0+20495+db24e7b4.noarch.rpmLinux
Rubygems-devel update (ELSA-2022-0543) rubygems-devel-3.0.3.1-108.module+el8.5.0+20495+db24e7b4.noarch.rpmLinux
Ruby update (ELSA-2022-0545) ruby-2.5.9-107.module+el8.5.0+20497+d0a7b862.i686.rpmLinux
Ruby update (ELSA-2022-0545) ruby-2.5.9-107.module+el8.5.0+20497+d0a7b862.x86_64.rpmLinux
Ruby-devel update (ELSA-2022-0545) ruby-devel-2.5.9-107.module+el8.5.0+20497+d0a7b862.i686.rpmLinux
Ruby-devel update (ELSA-2022-0545) ruby-devel-2.5.9-107.module+el8.5.0+20497+d0a7b862.x86_64.rpmLinux
Ruby-doc update (ELSA-2022-0545) ruby-doc-2.5.9-107.module+el8.5.0+20497+d0a7b862.noarch.rpmLinux
Ruby-irb update (ELSA-2022-0545) ruby-irb-2.5.9-107.module+el8.5.0+20497+d0a7b862.noarch.rpmLinux
Ruby-libs update (ELSA-2022-0545) ruby-libs-2.5.9-107.module+el8.5.0+20497+d0a7b862.i686.rpmLinux
Ruby-libs update (ELSA-2022-0545) ruby-libs-2.5.9-107.module+el8.5.0+20497+d0a7b862.x86_64.rpmLinux
Rubygem-abrt update (ELSA-2022-0545) rubygem-abrt-0.3.0-4.module+el8.3.0+7756+e45777e9.noarch.rpmLinux
Rubygem-abrt-doc update (ELSA-2022-0545) rubygem-abrt-doc-0.3.0-4.module+el8.3.0+7756+e45777e9.noarch.rpmLinux
Rubygem-bigdecimal update (ELSA-2022-0545) rubygem-bigdecimal-1.3.4-107.module+el8.5.0+20497+d0a7b862.i686.rpmLinux
Rubygem-bigdecimal update (ELSA-2022-0545) rubygem-bigdecimal-1.3.4-107.module+el8.5.0+20497+d0a7b862.x86_64.rpmLinux
Rubygem-bson update (ELSA-2022-0545) rubygem-bson-4.3.0-2.module+el8.3.0+7756+e45777e9.x86_64.rpmLinux
Rubygem-bson-doc update (ELSA-2022-0545) rubygem-bson-doc-4.3.0-2.module+el8.3.0+7756+e45777e9.noarch.rpmLinux
Rubygem-bundler update (ELSA-2022-0545) rubygem-bundler-1.16.1-4.module+el8.5.0+20497+d0a7b862.noarch.rpmLinux
Rubygem-bundler-doc update (ELSA-2022-0545) rubygem-bundler-doc-1.16.1-4.module+el8.5.0+20497+d0a7b862.noarch.rpmLinux
Rubygem-did_you_mean update (ELSA-2022-0545) rubygem-did_you_mean-1.2.0-107.module+el8.5.0+20497+d0a7b862.noarch.rpmLinux
Rubygem-io-console update (ELSA-2022-0545) rubygem-io-console-0.4.6-107.module+el8.5.0+20497+d0a7b862.i686.rpmLinux
Rubygem-io-console update (ELSA-2022-0545) rubygem-io-console-0.4.6-107.module+el8.5.0+20497+d0a7b862.x86_64.rpmLinux
Rubygem-json update (ELSA-2022-0545) rubygem-json-2.1.0-107.module+el8.5.0+20497+d0a7b862.i686.rpmLinux
Rubygem-json update (ELSA-2022-0545) rubygem-json-2.1.0-107.module+el8.5.0+20497+d0a7b862.x86_64.rpmLinux
Rubygem-minitest update (ELSA-2022-0545) rubygem-minitest-5.10.3-107.module+el8.5.0+20497+d0a7b862.noarch.rpmLinux
Rubygem-mongo update (ELSA-2022-0545) rubygem-mongo-2.5.1-2.module+el8.3.0+7756+e45777e9.noarch.rpmLinux
Rubygem-mongo-doc update (ELSA-2022-0545) rubygem-mongo-doc-2.5.1-2.module+el8.3.0+7756+e45777e9.noarch.rpmLinux
Rubygem-mysql2 update (ELSA-2022-0545) rubygem-mysql2-0.4.10-4.module+el8.3.0+7756+e45777e9.x86_64.rpmLinux
Rubygem-mysql2-doc update (ELSA-2022-0545) rubygem-mysql2-doc-0.4.10-4.module+el8.3.0+7756+e45777e9.noarch.rpmLinux
Rubygem-net-telnet update (ELSA-2022-0545) rubygem-net-telnet-0.1.1-107.module+el8.5.0+20497+d0a7b862.noarch.rpmLinux
Rubygem-openssl update (ELSA-2022-0545) rubygem-openssl-2.1.2-107.module+el8.5.0+20497+d0a7b862.i686.rpmLinux
Rubygem-openssl update (ELSA-2022-0545) rubygem-openssl-2.1.2-107.module+el8.5.0+20497+d0a7b862.x86_64.rpmLinux
Rubygem-pg update (ELSA-2022-0545) rubygem-pg-1.0.0-2.module+el8.3.0+7756+e45777e9.x86_64.rpmLinux
Rubygem-pg-doc update (ELSA-2022-0545) rubygem-pg-doc-1.0.0-2.module+el8.3.0+7756+e45777e9.noarch.rpmLinux
Rubygem-power_assert update (ELSA-2022-0545) rubygem-power_assert-1.1.1-107.module+el8.5.0+20497+d0a7b862.noarch.rpmLinux
Rubygem-psych update (ELSA-2022-0545) rubygem-psych-3.0.2-107.module+el8.5.0+20497+d0a7b862.i686.rpmLinux
Rubygem-psych update (ELSA-2022-0545) rubygem-psych-3.0.2-107.module+el8.5.0+20497+d0a7b862.x86_64.rpmLinux
Rubygem-rake update (ELSA-2022-0545) rubygem-rake-12.3.3-107.module+el8.5.0+20497+d0a7b862.noarch.rpmLinux
Rubygem-rdoc update (ELSA-2022-0545) rubygem-rdoc-6.0.1.1-107.module+el8.5.0+20497+d0a7b862.noarch.rpmLinux
Rubygem-test-unit update (ELSA-2022-0545) rubygem-test-unit-3.2.7-107.module+el8.5.0+20497+d0a7b862.noarch.rpmLinux
Rubygem-xmlrpc update (ELSA-2022-0545) rubygem-xmlrpc-0.3.0-107.module+el8.5.0+20497+d0a7b862.noarch.rpmLinux
Rubygems update (ELSA-2022-0545) rubygems-2.7.6.3-107.module+el8.5.0+20497+d0a7b862.noarch.rpmLinux
Rubygems-devel update (ELSA-2022-0545) rubygems-devel-2.7.6.3-107.module+el8.5.0+20497+d0a7b862.noarch.rpmLinux
ruby:2.5 security update (RLSA-2022:0545) rubygem-bundler-doc-1.16.1-4.module+el8.5.0+739+43897a5e.noarch.rpmLinux
SUSE-SU-2025:1294-1(Basesystem Module 15-SP6) ruby2.5-rubygem-bundler-2.2.34-150000.3.11.1.x86_64.rpmLinux
Rubygem-json update (ELSA-2025-4063) rubygem-json-2.6.1-145.module+el8.10.0+90550+7d8a4a30.x86_64.rpmLinux
Rubygem-json update (ELSA-2025-4063) rubygem-json-2.6.1-145.module+el8.10.0+90550+7d8a4a30.i686.rpmLinux
Rubygem-irb update (ELSA-2025-4063) rubygem-irb-1.4.1-145.module+el8.10.0+90550+7d8a4a30.noarch.rpmLinux
Rubygem-io-console update (ELSA-2025-4063) rubygem-io-console-0.5.11-145.module+el8.10.0+90550+7d8a4a30.x86_64.rpmLinux
Rubygem-io-console update (ELSA-2025-4063) rubygem-io-console-0.5.11-145.module+el8.10.0+90550+7d8a4a30.i686.rpmLinux
Rubygem-bundler update (ELSA-2025-4063) rubygem-bundler-2.3.27-145.module+el8.10.0+90550+7d8a4a30.noarch.rpmLinux
Rubygem-bigdecimal update (ELSA-2025-4063) rubygem-bigdecimal-3.1.1-145.module+el8.10.0+90550+7d8a4a30.x86_64.rpmLinux
Rubygem-bigdecimal update (ELSA-2025-4063) rubygem-bigdecimal-3.1.1-145.module+el8.10.0+90550+7d8a4a30.i686.rpmLinux
Rubygem-abrt-doc update (ELSA-2025-4063) rubygem-abrt-doc-0.4.0-1.module+el8.7.0+20780+b11ff321.noarch.rpmLinux
Rubygem-mysql2 update (ELSA-2025-4063) rubygem-mysql2-0.5.3-2.module+el8.7.0+20780+b11ff321.x86_64.rpmLinux
Ruby-libs update (ELSA-2025-4063) ruby-libs-3.1.7-145.module+el8.10.0+90550+7d8a4a30.x86_64.rpmLinux
Ruby-libs update (ELSA-2025-4063) ruby-libs-3.1.7-145.module+el8.10.0+90550+7d8a4a30.i686.rpmLinux
Ruby-doc update (ELSA-2025-4063) ruby-doc-3.1.7-145.module+el8.10.0+90550+7d8a4a30.noarch.rpmLinux
Ruby-devel update (ELSA-2025-4063) ruby-devel-3.1.7-145.module+el8.10.0+90550+7d8a4a30.x86_64.rpmLinux
Ruby-devel update (ELSA-2025-4063) ruby-devel-3.1.7-145.module+el8.10.0+90550+7d8a4a30.i686.rpmLinux
Ruby-default-gems update (ELSA-2025-4063) ruby-default-gems-3.1.7-145.module+el8.10.0+90550+7d8a4a30.noarch.rpmLinux
Ruby-bundled-gems update (ELSA-2025-4063) ruby-bundled-gems-3.1.7-145.module+el8.10.0+90550+7d8a4a30.x86_64.rpmLinux
Ruby-bundled-gems update (ELSA-2025-4063) ruby-bundled-gems-3.1.7-145.module+el8.10.0+90550+7d8a4a30.i686.rpmLinux
Ruby update (ELSA-2025-4063) ruby-3.1.7-145.module+el8.10.0+90550+7d8a4a30.x86_64.rpmLinux
Ruby update (ELSA-2025-4063) ruby-3.1.7-145.module+el8.10.0+90550+7d8a4a30.i686.rpmLinux
Rubygem-abrt update (ELSA-2025-4063) rubygem-abrt-0.4.0-1.module+el8.7.0+20780+b11ff321.noarch.rpmLinux
Rubygems-devel update (ELSA-2025-4063) rubygems-devel-3.3.27-145.module+el8.10.0+90550+7d8a4a30.noarch.rpmLinux
Rubygems update (ELSA-2025-4063) rubygems-3.3.27-145.module+el8.10.0+90550+7d8a4a30.noarch.rpmLinux
Rubygem-typeprof update (ELSA-2025-4063) rubygem-typeprof-0.21.3-145.module+el8.10.0+90550+7d8a4a30.noarch.rpmLinux
Rubygem-test-unit update (ELSA-2025-4063) rubygem-test-unit-3.5.3-145.module+el8.10.0+90550+7d8a4a30.noarch.rpmLinux
Rubygem-rss update (ELSA-2025-4063) rubygem-rss-0.3.1-145.module+el8.10.0+90550+7d8a4a30.noarch.rpmLinux
Rubygem-rexml update (ELSA-2025-4063) rubygem-rexml-3.3.9-145.module+el8.10.0+90550+7d8a4a30.noarch.rpmLinux
Rubygem-rdoc update (ELSA-2025-4063) rubygem-rdoc-6.4.1.1-145.module+el8.10.0+90550+7d8a4a30.noarch.rpmLinux
Rubygem-rbs update (ELSA-2025-4063) rubygem-rbs-2.7.0-145.module+el8.10.0+90550+7d8a4a30.x86_64.rpmLinux
Rubygem-rbs update (ELSA-2025-4063) rubygem-rbs-2.7.0-145.module+el8.10.0+90550+7d8a4a30.i686.rpmLinux
Rubygem-rake update (ELSA-2025-4063) rubygem-rake-13.0.6-145.module+el8.10.0+90550+7d8a4a30.noarch.rpmLinux
Rubygem-psych update (ELSA-2025-4063) rubygem-psych-4.0.4-145.module+el8.10.0+90550+7d8a4a30.x86_64.rpmLinux
Rubygem-psych update (ELSA-2025-4063) rubygem-psych-4.0.4-145.module+el8.10.0+90550+7d8a4a30.i686.rpmLinux
Rubygem-power_assert update (ELSA-2025-4063) rubygem-power_assert-2.0.1-145.module+el8.10.0+90550+7d8a4a30.noarch.rpmLinux
Rubygem-pg-doc update (ELSA-2025-4063) rubygem-pg-doc-1.3.2-1.module+el8.7.0+20780+b11ff321.noarch.rpmLinux
Rubygem-pg update (ELSA-2025-4063) rubygem-pg-1.3.2-1.module+el8.7.0+20780+b11ff321.x86_64.rpmLinux
Rubygem-mysql2-doc update (ELSA-2025-4063) rubygem-mysql2-doc-0.5.3-2.module+el8.7.0+20780+b11ff321.noarch.rpmLinux
Rubygem-minitest update (ELSA-2025-4063) rubygem-minitest-5.15.0-145.module+el8.10.0+90550+7d8a4a30.noarch.rpmLinux
Vulnerabilities CVE-2020-36327 are fixed in Ruby-bundler for Linux 2.2.10Linux
Vulnerabilities CVE-2020-36327 are fixed in Ruby-bundler for Linux 2.2.18Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234