{
  "schema_version": "1.7.0",
  "id": "RHSA-2022:6855",
  "related": [],
  "upstream": [
    "CVE-2021-41816",
    "CVE-2021-41817",
    "CVE-2021-41819",
    "CVE-2022-28738",
    "CVE-2022-28739"
  ],
  "published": "2024-10-01T14:47:52Z",
  "modified": "2026-06-29T10:43:21Z",
  "summary": "Red Hat Security Advisory: rh-ruby30-ruby security, bug fix, and enhancement update",
  "severity": [
    {
      "type": "CVSS_V3",
      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
    }
  ],
  "affected": [
    {
      "package": {
        "name": "rh-ruby30-ruby",
        "ecosystem": "Red Hat:rhel_software_collections:3::el7",
        "purl": "pkg:rpm/redhat/rh-ruby30-ruby"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:3.0.4-149.el7"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "rh-ruby30-ruby-debuginfo",
        "ecosystem": "Red Hat:rhel_software_collections:3::el7",
        "purl": "pkg:rpm/redhat/rh-ruby30-ruby-debuginfo"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:3.0.4-149.el7"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "rh-ruby30-ruby-default-gems",
        "ecosystem": "Red Hat:rhel_software_collections:3::el7",
        "purl": "pkg:rpm/redhat/rh-ruby30-ruby-default-gems"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:3.0.4-149.el7"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "rh-ruby30-ruby-devel",
        "ecosystem": "Red Hat:rhel_software_collections:3::el7",
        "purl": "pkg:rpm/redhat/rh-ruby30-ruby-devel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:3.0.4-149.el7"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "rh-ruby30-ruby-doc",
        "ecosystem": "Red Hat:rhel_software_collections:3::el7",
        "purl": "pkg:rpm/redhat/rh-ruby30-ruby-doc"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:3.0.4-149.el7"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "rh-ruby30-ruby-libs",
        "ecosystem": "Red Hat:rhel_software_collections:3::el7",
        "purl": "pkg:rpm/redhat/rh-ruby30-ruby-libs"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:3.0.4-149.el7"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "rh-ruby30-rubygem-bigdecimal",
        "ecosystem": "Red Hat:rhel_software_collections:3::el7",
        "purl": "pkg:rpm/redhat/rh-ruby30-rubygem-bigdecimal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:3.0.0-149.el7"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "rh-ruby30-rubygem-bundler",
        "ecosystem": "Red Hat:rhel_software_collections:3::el7",
        "purl": "pkg:rpm/redhat/rh-ruby30-rubygem-bundler"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:2.2.33-149.el7"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "rh-ruby30-rubygem-io-console",
        "ecosystem": "Red Hat:rhel_software_collections:3::el7",
        "purl": "pkg:rpm/redhat/rh-ruby30-rubygem-io-console"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:0.5.7-149.el7"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "rh-ruby30-rubygem-irb",
        "ecosystem": "Red Hat:rhel_software_collections:3::el7",
        "purl": "pkg:rpm/redhat/rh-ruby30-rubygem-irb"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:1.3.5-149.el7"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "rh-ruby30-rubygem-json",
        "ecosystem": "Red Hat:rhel_software_collections:3::el7",
        "purl": "pkg:rpm/redhat/rh-ruby30-rubygem-json"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:2.5.1-149.el7"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "rh-ruby30-rubygem-minitest",
        "ecosystem": "Red Hat:rhel_software_collections:3::el7",
        "purl": "pkg:rpm/redhat/rh-ruby30-rubygem-minitest"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:5.14.2-149.el7"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "rh-ruby30-rubygem-power_assert",
        "ecosystem": "Red Hat:rhel_software_collections:3::el7",
        "purl": "pkg:rpm/redhat/rh-ruby30-rubygem-power_assert"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:1.2.0-149.el7"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "rh-ruby30-rubygem-psych",
        "ecosystem": "Red Hat:rhel_software_collections:3::el7",
        "purl": "pkg:rpm/redhat/rh-ruby30-rubygem-psych"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:3.3.2-149.el7"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "rh-ruby30-rubygem-rake",
        "ecosystem": "Red Hat:rhel_software_collections:3::el7",
        "purl": "pkg:rpm/redhat/rh-ruby30-rubygem-rake"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:13.0.3-149.el7"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "rh-ruby30-rubygem-rbs",
        "ecosystem": "Red Hat:rhel_software_collections:3::el7",
        "purl": "pkg:rpm/redhat/rh-ruby30-rubygem-rbs"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:1.4.0-149.el7"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "rh-ruby30-rubygem-rexml",
        "ecosystem": "Red Hat:rhel_software_collections:3::el7",
        "purl": "pkg:rpm/redhat/rh-ruby30-rubygem-rexml"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:3.2.5-149.el7"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "rh-ruby30-rubygem-rss",
        "ecosystem": "Red Hat:rhel_software_collections:3::el7",
        "purl": "pkg:rpm/redhat/rh-ruby30-rubygem-rss"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:0.2.9-149.el7"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "rh-ruby30-rubygem-test-unit",
        "ecosystem": "Red Hat:rhel_software_collections:3::el7",
        "purl": "pkg:rpm/redhat/rh-ruby30-rubygem-test-unit"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:3.3.7-149.el7"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "rh-ruby30-rubygem-typeprof",
        "ecosystem": "Red Hat:rhel_software_collections:3::el7",
        "purl": "pkg:rpm/redhat/rh-ruby30-rubygem-typeprof"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:0.15.2-149.el7"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "rh-ruby30-rubygems",
        "ecosystem": "Red Hat:rhel_software_collections:3::el7",
        "purl": "pkg:rpm/redhat/rh-ruby30-rubygems"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:3.2.33-149.el7"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "rh-ruby30-rubygems-devel",
        "ecosystem": "Red Hat:rhel_software_collections:3::el7",
        "purl": "pkg:rpm/redhat/rh-ruby30-rubygems-devel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:3.2.33-149.el7"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://access.redhat.com/errata/RHSA-2022:6855"
    },
    {
      "type": "ARTICLE",
      "url": "https://access.redhat.com/security/updates/classification/#moderate"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2025104"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2026752"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2026757"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2075685"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2075687"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2128628"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2128629"
    },
    {
      "type": "ADVISORY",
      "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6855.json"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2021-41816"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41816"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41816"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2021-41817"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41817"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41817"
    },
    {
      "type": "ARTICLE",
      "url": "https://www.ruby-lang.org/en/news/2021/11/15/date-parsing-method-regexp-dos-cve-2021-41817/"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2021-41819"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41819"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41819"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-28738"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-28738"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-28738"
    },
    {
      "type": "ARTICLE",
      "url": "http://www.ruby-lang.org/en/news/2022/04/12/double-free-in-regexp-compilation-cve-2022-28738/"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-28739"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-28739"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-28739"
    },
    {
      "type": "ARTICLE",
      "url": "http://www.ruby-lang.org/en/news/2022/04/12/buffer-overrun-in-string-to-float-cve-2022-28739/"
    }
  ]
}